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INTRODUCTION 


In this unit we complete the description of our formal system and start to 
discuss how to use it as a framework for proving theorems of number theory. 


In Unit 4 we introduced a formal language for number theory and in Unit 5 
we described what is meant by a formal proof. We also discussed the seven 
rules of proof that enable us to handle the connectives and the quantifiers of 
the formal language. In Section 2, we introduce the two remaining rules of 
proof, relating to the identity symbol, to complete the nine rules of proof of 
our formal system. 


By requiring that each of our rules is logically valid, we ensure that 
whenever we have a formal proof within our system showing that the 
formula ~ can be derived from assumptions ¢,, ¢,...,0,, then ~ is a logical 
consequence of %1, ¢o,...,,, that is, ~ is true in every interpretation in 
which ¢,,9,...,@, are true. This is a consequence of the Correctness 
Theorem, which we shall discuss in Section 2. We shall also discuss a far 
more remarkable result, called the Adequacy Theorem, that our system with 
just these nine rules of proof is sufficiently powerful for the converse of the 
Correctness Theorem to hold, so that if ~ is a logical consequence of 

1; b2,.--,, then there is a formal proof deriving ~ from the assumptions 


1; 23-3 Pr: 


The economy of setting up our formal system with just nine rules is helpful 
from the point of view of obtaining theoretical results about the system and 
means that there are fewer rules whose correct application a machine would 
have to check. However, it has the down side that finding formal proofs can 
be tougher than if we had many more rules of proof. So, in Section 1, we 
discuss some useful strategies for finding formal proofs, including a powerful 
technique called proof by contradiction. 


The particular case of the Correctness Theorem when there are no 
assumptions says that if a formula ~ can be derived from no assumptions, 
then ~ is true in every interpretation, and hence ~ is true in the standard 
interpretation M. However, we clearly cannot expect the converse to hold. 
There are sentences which are true in. for example (0’ + 0’) = 0”, that we 
cannot expect to be derivable using no assumptions, as our rules of proof do 
not take into account the intended interpretation of the arithmetical 
symbols. Since our aim is to establish a formal system for number theory, we 
see that we still need to add some arithmetical axioms that encapsulate the 
basic properties of the operations of addition and multiplication of natural 
numbers. We do this in the Section 3 of this unit. We then explore, in 

Unit 7, some of the sentences of our formal language which can be derived in 
our formal system using these axioms as assumptions. 


1 TECHNIQUES OF PROOF 


In this section we look at some techniques for obtaining formal proofs using 
the seven rules of proof introduced in Unit 5. 


We have already given some of these techniques in Unit 5. For example, if 
we are seeking to find a formal proof of a formula w from the assumptions 
$1, %2,--+,0,, then a sensible starting point is to introduce the formulas 
$1, ¢9,---,@, as assumptions using the Assumption Rule (Ass). We have 
also noted that, when an assumption has the form Wv ¢, it is often a good 
move to use the Universal Quantifier Elimination Rule (UE) to remove the 
universal quantifier; and, when an assumption has the form Jv @, it is often 
a good idea to introduce ¢ as an additional assumption with a view to 
eventually using the Existential Hypothesis Rule (EH). 
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This economy in drawing up the 
rules of proof corresponds to the 
economy that is normally practised 
in stating the axioms of algebraic 
structures. For example, when 
stating the group axioms, we need 
only specify the existence of an 
identity element. There is no need 
to stipulate in the axioms that it is 
unique, since we can deduce this 
fact from the axioms. Choosing a 
minimal set of axioms for groups 
reduces the amount of work needed 
whenever we want to check that a 
particular algebraic structure is a 
group. 


The logical form of the formula that we are trying to derive also gives a 

useful clue as to how to proceed. We see from the formation rules for Unit 4, Subsection 2.1. 
formulas that, unless the desired conclusion is an atomic formula, it will 

have one of the forms ~o, (¢& Y), ($ V Y), ($ > v), (6 VY), Wwe or Ave. 

In the examples in Unit 5 we have already indicated that the Universal and 

Existential Quantifier Introduction Rules (UI and EI) are usually what is 

needed to derive formulas of the form Wv ¢ or Jv ¢. We also noted that, 

when it comes to deriving implications, that is, formulas of the form 

($ — w), then the Conditional Proof Rule (CP) is usually helpful. 


We need to complete the picture by discussing strategies which are usually 
helpful when the formula we are trying to derive has one of the other forms, 
namely ~o, (¢ & Y), ($ V y) and (¢ = y). In each case it is usually a good 
strategy to aim to use the Tautology Rule (Taut). Each use of this rule 
depends on a particular formula being a tautology. Often it will not be too 
difficult to see which tautology to use, but in some cases it will be less 
obvious. An important example of this latter kind occurs when we are 
trying to prove a negation, that is, a formula of the form nø. 


We look at one very powerful technique for proving negations, known as 
proof by contradiction, in Subsection 1.1. Then, in Subsection 1.2, we look at 
strategies which are helpful when trying to prove formulas of the form 

(ġ & Y), ($ V Y) and (¢ + y), and summarize the techniques for obtaining 
formal proofs. To help use the Tautology Rule, it is very useful to know a 
few standard tautologies and we give some of these in Subsection 1.3. 


1.1 Proof by contradiction 


A very common and effective technique in everyday mathematics for proving 
that some statement is not true is to show that the assumption that it is 
true leads to a contradiction. This method of proof is called proof by 
contradiction or reductio ad absurdum. 


We used this method of proof in the example of an informal proof which we 
studied in detail at the beginning of Section 1 of Unit 5. In that case we 
wished to deduce from the assumption ‘n? is even’ the conclusion ‘n is even’. 
We did this by assuming that ‘n is odd’ and from this, after some work, we 
were able to deduce the contradiction ‘n? is odd and n? is even’, or 
equivalently that ‘n? is even and n? is not even’. From this we were able to 
draw the conclusion that, given the underlying assumption that ‘n? is even’, 
it follows that ‘n is odd’ is not true, that is, that ‘n is even’. 


This is a typical example of an informal proof by contradiction. We now 
look at it more closely from a formal viewpoint. 


A contradiction is the simultaneous assertion of a statement and its 
negation. The formal counterpart of this is a formula of the form (¢ & ~g). 
Thus the formal counterpart of a proof by contradiction is the claim that if 
from ~ and possibly other assumptions we can derive a contradiction 

(¢ & ~o) then from the other assumptions alone we can derive =y. We now 
give the argument which justifies this claim, and this argument yields the 
technique which we can often use to prove formulas of the form ~w. 


Suppose then that we have a formal proof of the contradiction (¢ & ~o) 
from the assumptions 9), 62,...,4, and Y. This means that we have a formal 
proof whose last line has the form 


ty, to,...,tk,s (n) (¢&-7¢) ‘justification’ 


where t1, t2,...,¢,%,s are the numbers of the lines on which the formulas 
01, 02,...,0, and w have been introduced as assumptions. If we now make 
one use of each of the Conditional Proof and Tautology Rules, we can 
achieve our desired conclusion: 


Cinta ste een) (¢ & ng) ‘justification’ 
ti, to,...,tk (n+1) (b> (¢&-¢)) CP,n 
itassa xy Che (n + 2) = Taut,n+1 


It is easily seen that we have made a correct use of the CP Rule on line 

n +1. One of the assumptions in force on line n is the formula 7. This is 
the assumption introduced on line s. Using the CP Rule enables us to drop 
this assumption, and to introduce ~w as the antecedent of the implication on 
line n+ 1. 


On line n + 2 we have applied the Tautology Rule to line n + 1. For this to 
be a correct use of this rule, we need to ensure that the formula 
((W — (¢ & 7¢g)) —> ~y) is a tautology. To check this, we use a truth table: 


(y > (6 & = ¢)) > + y) 
let lO Oar er sleet al 
1-0- LOR OR tO lien Oe al 
Ont. LO Oe 0 
Os Ay MORO Se Oi eal alk O) 
ij 
tautology 


We thus see that, having obtained a correct proof of the contradiction 
(¢ & no) from the assumptions 01,82, ..., 0p and w, it takes only two more 
lines to extend it to a proof of ~y from the assumptions 61, 02,..., 0x. 


This method for proving =y from the assumptions 0}, 62,..., 4% is the 
method of proof by contradiction. It is a very useful method for proving 
negations, and we shall shortly illustrate this with several examples. First, 
however, we consider how to go about deriving the contradiction (¢ & ~g) 
on which this method depends. 


Since, clearly, the formula ((¢ & ~g) — (¢ & 7¢@)) is a tautology, to derive 
the contradiction (¢ & =@) it is sufficient to derive each of the formulas ¢ 
and -¢@ separately. For then a single use of the Tautology Rule enables us to 
derive (¢ & =¢). That is the easy part. The hard thing is the choice of the 
formula ¢ which gives us one half of the contradiction. If we are aiming at 
deriving —w from the assumptions 0}, 02, ..., 0k, then @ needs to be chosen 
so that we can derive both ¢ and nọ from the assumptions 6), 02,...,0, and 
w. There is no automatic rule for choosing the formula ¢, given 

01, 02,...,9%,, but in many cases there are clues which lead us to a choice 
of ¢ for which the derivation of the contradiction (¢ & =@) from the 
assumptions 0), 02,...,4, and w is not too difficult. This is best illustrated 
by some examples, and we now turn to these. 


The rule of proof that has been 
used to obtain the last line of the 
formal proof is not relevant here, so 
we have simply written 
‘justification’ on the right of this 
line. 


Example 1.1 
We show that, for all formulas ¢, 


dung F -Ww o 


Our starting point is the standard one. Since we want to derive Vu ¢ from 
the assumption Jv 7¢, we introduce this latter formula as an assumption. 
Next, our experience from the previous unit suggests that, to derive -Vu ġ 
from this assumption, we should aim to deduce it from the assumption nø, 
and then use the EH Rule. To this end we introduce 7¢ as an assumption 
on line 2. We now turn our attention to the formula we are aiming to derive, 
namely —Vu @. Since this is a negation, we try to derive it using proof by 
contradiction. This involves introducing Vv ¢ as an assumption with a view 
to deriving a contradiction. This gives the first three lines of our formal 
proof as follows. 


1 (1) dv-¢ Ass 
2 2 SO Ass 
3 (3) Vud Ass 


We are now seeking to derive a contradiction. Two thoughts now come 
together. First, since we have —=¢ on line 2, to complete the derivation of a 
contradiction all we need is to be able to derive ¢ on a subsequent line. 
Second, we note that the formula Vv ¢ occurs on line 3, and that the UE 
Rule enables us to derive from it the formula ¢. Thus it looks as though we 
can achieve our aim, and indeed we do this as follows. 


1 (1) Wwy Ass 

2 (2) ad Ass 

3 (3) Wo Ass 

3 (4) o UE, 3 

2,3 (5) (¢&-7¢) Taut, 2,4 

2 (6) (Wud (¢&-4)) CP,5 

2 (7) VU Taut, 6 

1 (8) -wọ EH, 7 


We have used the proof by contradiction method on lines 6 and 7. The use 
of the EH Rule on line 8 is legitimate as the variable v cannot have any free 
occurrences in the formula =Vv ¢. + 


Example 1.2 
We show that, for all formulas ¢ and wy, 


Vu (4 > $) F (Jug — -Wv 4) 


Our starting point is the standard one. Since we wish to derive 

(au ~no — -=Vv7) from the assumption Vu (Y — ¢), we introduce this latter 
formula as an assumption on line 1. Next we turn our attention to the 
formula (Jv =ý — —Vv Y) which we are aiming to derive. Since this is an 
implication, we adopt the standard strategy and make the assumption Jv 7¢ 
with a view to deriving the conclusion =Vv % and then using the CP Rule. 
Again, as is also standard when we have an existential formula as an 
assumption, we also introduce as an assumption the formula without the 
initial existential quantifier, with a view to using the EH Rule. If we do this, 
the first three lines of our formal proof are as follows. 


1 (1) Ww(y—¢) Ass 
2 (2) wa Ass 
3 (3)) = Ass 


Now we need to remember that our aim is to derive =Vu y from the 
assumptions 1 and 2, and then use the CP Rule to derive (Su ~n — Vv 4%) 
from assumption 1 alone. Since =Vv 7 is a negation, we make the further 
assumption Vu ~ and aim to use proof by contradiction. Thus we add the line 


4 (4) Wwy Ass 


to the above three lines. Now, we are trying to derive a contradiction. We 

note that we have the formula ~o on line 3, and thus we would achieve our 

aim of deriving a contradiction if we could also derive ¢. There seems to be 

no immediate way to do this. However, another standard strategy now 

comes into play. Our formal proof now includes two universal formulas, on 

lines 1 and 4. We can use the UE Rule to drop the universal quantifiers from 

these formulas. We thus now have the following. This proof exploits what will, with 


experience, be a typical procedure: 
1 (1) Ww(y—¢) Ass peel off as many of the quantifiers 


2 (2) Jong Ass as possible from the assumptions 

3 (3) $ A and hope then to be able to derive 
( 2 = a contradiction. 

4 (4) Vuw Ass 

1 (5) (¥- 4) UE, 1 

4 (6) w UE, 4 


We need to keep in mind that our current aim is to derive ¢ so that, 
together with the formula —¢ on line 3, we have our desired contradiction. 


At this stage there is no obvious way we can make progress by using any of 
the quantifier rules. It is therefore sensible to see if we can use the 
Tautology Rule to derive the formula ¢ which we are aiming for. Is this 
formula a tautological consequence of formulas that have already occurred in 
our proof? You might recognize that ¢ is a tautological consequence of the 
formulas ~ and (w — ¢). It is easy to check that the formula 

((w & (y — ¢)) — @) is a tautology and hence we can use the Tautology 
Rule to derive ¢ from % and (Y > ¢). 


This leaves us in a position to complete the formal proof using proof by 
contradiction. We do this as follows. 


1 (1) Wiw-¢) Ass 

22 (2) aloe Ass 

Sh jee, Ass 

4 (4) Vow Ass 

1 (5) (p>) UE, 1 

4 (6) » UE,4 
LA (io Taut, 5,6 

1,3,4 (8) (¢&-7¢) Taut, 3,7 

1,3 (9) (Wwy —> ($ &~g)) CP,8 
1,3 (10) -Wwy Taut, 9 
1,2 (11) -Wwy EH, 10 


1 (12) (av-¢d—>-Vuy) CP,11 


We have used the proof by contradiction method on lines 9 and 10. The use 
of the EH Rule to derive line 11 from line 10 is legitimate since the variable 
v cannot have any free occurrences in either the formula =Vv w or the 
assumption other than ~ on which line 10 depends, namely the formula 


Vu (Y > ¢). 


Note that, when we were deciding how to achieve the desired conclusion ¢ 

on line 7, it helped to be able to recognize that ¢ is a tautological To help you recognize such 
consequence of the formulas w and (Y — ¢). However, even if you were not tautological consequences, we list 
sure what to do at this stage, you could have guessed that @ was a ae standard tautologies in 
tautological consequence of w and (Y — ¢) and you could have then Sassari an 

confirmed this by using the standard truth table method to check that 

((Y & (Y > ¢)) > @) is indeed a tautology. + 


In fact, we could have saved one line in the formal proof in Example 1.2 by 
noting that the two uses of the Tautology Rule on lines 7 and 8 could be 
compressed into one. You can check that (((~o & w) & (y > ¢)) — (¢ & 7¢)) 
is a tautology. Hence after line 6 we could, using the Tautology Rule, derive 
(¢ & ~o) from lines 3, 5 and 6. This would give line 7 as 


1,3,4 (7) (¢&-74) Taut,3,5,6 


and the proof could then be completed with lines 9, 10, 11 and 12 
(renumbered 8, 9, 10 and 11) and with the appropriate modifications to the 
line references in the justification column. This corresponds to one’s 
experience in everyday mathematics, where, once a proof of a theorem has 
been found, it is frequently possible to find ways to simplify it. However, as 
our concern here is with using standard techniques to find formal proofs, we 
shan’t usually be bothered about trying to shorten our proofs. 


Problem 1.1 
(a) Show that, for all formulas ¢, 
du o F AVu no 


(b) Show that, for all formulas ¢ and 4%, 
Vu dg, w ~y F ~w (¢ > Y) 


Proof by contradiction can also be used to derive formulas which are not 
negations. Our previous examples rely on the fact that the formula 


((p => (6 & =¢)) > 4) 
is always a tautology. It is easily checked that 


(CY > (¢& =¢)) > 4) 


is also a tautology. It follows that if we can derive a contradiction from the 
assumptions 01,02, ..., 0% and ~y, then by using the CP Rule and the 
Tautology Rule we can derive w from the assumptions 61, 02,..., 0p. This 
method can be used to derive a formula ~ whatever the logical form of y, 
and thus is always worth a try if no other method seems to be available. 
The next example shows this method in use. 


Example 1.3 
We show that, for all formulas ¢, 


adv ag F Ww o 


In line with our standard strategy, we begin our formal proof by introducing 

the assumption ~Jv ~o. We now aim to derive Vv ¢. We adopt the usual 

strategy for deriving universal formulas, that is we aim to derive ¢ and then 

to use the UI Rule. How can we derive ¢? There is no immediately obvious 

way to do this. In this situation, it is worth aiming to give a proof by 

contradiction on the lines indicated above. To do this we introduce the 

formula -¢ as an assumption and try to derive a contradiction. If we adopt Note that assuming =w nọ and 


this strategy, we will have written the following two lines. “Vv ¢ and trying to derive a 
contradiction doesn’t get anywhere. 
1 * (Ll) esuadeeAss 


Dan?) Ass 


We are seeking to derive a contradiction. We already have a negation on 
line 1 and we will thus have achieved a contradiction if we can also derive 
Jv ~o. It should then strike us that we can use the EI Rule to derive this 
formula. We can then use the proof by contradiction method. We are thus 
led to the following formal proof. 


1 (i) S00 Ass 
2 2) eg Ass 
2 (3) suse EI, 2 

1,2 (4) (Ivane & 74v7¢) Taut, 1,3 
1 (5) (7nd — (wag & m3u7¢)) CP, 4 
CRO O Taut, 5 
1 (7) Wo UI, 6 


The use of the UI Rule to derive line 7 is correct as the variable v does not 
occur freely in the formula ~3v ~ø which is the assumption in force on 
line 6. 4 


Sometimes one has to be extra careful about the formula one obtains for the 
contradiction, especially when the next step of the proof is a use of the EH 
Rule, as the next example illustrates. 


Example 1.4 


The incorrect proof below is an attempt to show that, for all formulas ¢ 


and w, 
$, Vu (a V 7d) F aw y 


where the variable v does not occur freely in ¢. 


TC) ee Ass Warning! This is not a correct 
2 (2) Wu(-V-¢) Ass proof! 
3s (J wh Ass 
4 (4) 4 Ass 
2 (5) (YV 7-49) UE, 2 
P25 (6) ec Taut, 1,5 
1,2,4 (7) (W&-7y) Taut, 4,6 
1,2,3 (8) (b&w) EH,7 
1,2 (9) (Ivy — (y &~=4)) CP,8 
1,2 (10) -wy Taut, 9 


10 


As ~v w is a negation, our strategy is to add the assumption uy to the 
assumptions ¢, Vu (=~ V 7@) and try to derive a contradiction. As the extra 
assumption is an existential formula, we also assume the formula without its 
existential quantifier, preparatory to a use of the EH Rule. We use the UE 
Rule to drop the universal quantifier from one of the other assumptions. We 
then derive a contradiction on line 7. Up to this point, the proof is correct. 
But there is a mistake on line 8. A correct application of the EH Rule to the 
formula on line 7, to replace assumption 4 by assumption 3, requires that 
the variable v does not occur freely in the formula on line 7 or in any of the 
assumptions, besides 4, on this line, namely assumptions | and 2. We are 
told that v doesn’t occur freely in ¢, which is assumption 1. Assumption 2 is 
the formula Vu (=y~ V 7@), in which there are no free occurrences of v thanks 
to the initial Vv. But there is no guarantee that v does not occur freely in 
the formula (w & 77), so we cannot use the EH Rule to obtain line 8. 


We can, however, rescue the proof by deriving the contradiction (¢ & 7@), in 
which the variable v does not occur freely, instead of (Y & ~y), which we can 
do using different tautologies for lines 6 and 7, as follows. 


XC) Ass 
2 (2) Va GYN =p) Ass 
3 (3) sue Ass 
4 (4) y Ass 
2 (5) (-¥v7¢) UE, 2 
2,4 (6) -7¢ Taut, 4,5 
1,2,4 (7) (¢&-¢) Taut, 1,6 
1,2,3 (8) (¢&-7¢) EH, 7 
1,2 (9) (vp (d&-7¢)) CP,8 
a ( LO) ceasing Taut, 9 


As v does not occur freely in ¢, it doesn’t occur freely in the formula 

(¢ & ~g) on line 7 or in either of assumptions 1 and 2, so the use of the 

EH Rule on line 8 is now correct. The proof by contradiction method then 
leads to the desired result. > 


Problem 1.2 
(a) Show that, for all formulas ¢ and 7, 


Wu (=b > 4), -wY H Wwe 


Hint: Introduce ~ġ as an extra assumption and aim for a contradiction. 
(b) Show that, for all formulas ¢ and 7, 


$, w (Y > 7g) F “Wop 


where the variable v does not occur freely in ¢. 


1.2 Techniques for finding formal proofs 


In this subsection we gather together standard techniques which are useful 
in finding formal proofs. Most of these techniques have already been used in 
earlier examples. Before we give a systematic list of these techniques, we 
discuss a few cases which we have not previously covered. 


The condition that v does not 
occur freely in ¢ is vital for this 
proof. If the condition is dropped, 
it is no longer always valid to infer 
adv w from the assumptions ¢ and 
Vu (= V n¢). There is further 
discussion of this issue once we 
have stated the Correctness 
Theorem in Subsection 2.2. 


An alternative way to rescue our 
first attempt at a proof is to take 
its first seven lines and use the 
Tautology Rule with the tautology 
((y & +) > ($ & +9)) to infer 

(¢ & ~no) on line 8, depending on 
assumptions 1, 2 and 4. Then finish 
off the proof with the last three 
lines of the adjacent proof with line 
numbers suitably adjusted. 
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Disjunctions 


Recall that by a disjunction we mean a formula of the form (¢ V 7). Our 
standard technique for proving formulas of this form is based on the fact 
that (¢ V 4%) is a tautological consequence of the implication (~ — w). This 
follows from the fact that, for all formulas ¢ and 4%, the formula 


((-¢ > ¥) > (V9) 


is a tautology, as is shown by the following truth table. 


Ud Yi ar eget BL 
TE Ra Ee Ce ke ak 
ST OSes Mer ee 70) al 
LOS i S0 tet. 20056 


It follows that, if we have a formal proof of the formula (=¢ — 7) from a 
given set of assumptions, then a single use of the Tautology Rule enables us 
to extend it to a formal proof of (¢ V w) from the same set of assumptions. 


We already have a technique which helps us to find a formal proof of an 
implication such as (~¢ — w). It is to add 7¢ to the list of assumptions and 
then aim to derive y. Then, by using the CP Rule, we obtain a formal proof 
of (-¢ — Y) from the other assumptions. Thus, the observation that (¢ V w) 
is a tautological consequence of (=¢ — Y) means that we can use essentially 
the same strategy to derive disjunctions. 


Example 1.5 
We show that, for all formulas ¢, 


H (Au n¢ V W o) 


Using the technique described above for deriving disjunctions, we aim to 
derive first the implication (dv ~ — Vu ¢). We shall be able to achieve 
this if we can derive Vv ¢ from the assumption ~v =¢. This is something we 
have already done in Example 1.3. Thus all we need to do in the present 
case is to add two lines to the formal proof of Example 1.3. On one line we 
use the CP Rule to get the required implication and then on the next line, 
by using the Tautology Rule, we obtain the formal proof of the disjunction. 
In this way we obtain the following formal proof. 


E (Gb) asta Ass 
ha ONE: Ass 
2 (3) wọ EI, 2 
1,2 (4) (dung & -w 7¢) Taut, 1,3 
1 (5) (nọ > (Iva & 73u-¢)) CP, 4 
ti (6) -0 Taut, 5 
1 (7) Wo UI, 6 
(8) Iwang — Wwe) CPT 
(9) (Ivanov Wu ¢) Taut, 8 9 
Problem 1.3 


Show that, for all formulas ¢, 
F (au ġ V Vu 7¢) 


12 


Recall that the absence of any 
formulas to the left of the turnstile 
symbol, |, indicates that there is a 
formal proof of which the last line 
consists of the formula 

(av ~no V Yu ¢) depending on no 
assumptions. 


Bi-implications 


By a bi-implication we mean a formula of the form (¢ + y). The following 
truth table shows that, for all formulas ¢ and w, the formula 


((¢ > 4) & (b> 4)) > (+ 4)) 


is a tautology. 


(¢@ > 4) & Y > 4) > (6 = 4) 
oe te E dT et 
ie 0 6 6.2.1 aoo 
BT @ 100 12 tee 
Crh 1 G18 41 G 


It follows that the formula (¢ + w) is a tautological consequence of the two 
formulas (@ — 7) and (y — ¢). Thus a standard technique for deriving an 
bi-implication of the form (¢ +> w) is to derive each of the implications 

(¢ — p) and (Y — ¢) separately, and then derive (¢ +> 7) by a single use of 
the Tautology Rule. Normally our technique for deriving the implication 

(¢ — y) will be to assume ¢, aim to derive 7 and then use the CP Rule. 
Similarly to derive (y — ¢) we shall usually assume 7, aim to derive ¢ and 
then use the CP Rule. 


Example 1.6 
We show that, for all formulas ¢ and 4%, 


F (9 > Y) = (dV ¥)) 


We have already noted that (¢ V w) is a tautological consequence of 

(~o — w). So it requires just one use of the Tautology Rule to derive 

(¢V Y) from (~ġ — 7). It easily checked that, conversely, (=¢ — W) is a 
tautological consequence of (¢ V w), and so we can adopt the same strategy 
for deriving (-¢ — w) from (¢ V w). This leads to the following formal proof. 


1 (1) (-+¢> 4) Ass 
1 (2) (v4) Taut, 1 
(3) (C4 > v) > (V 4)) CP,2 
4 (4) (V4) Ass 
4 (5) (-¢- y) Taut, 4 
(6) (dV) > (-¢>y)) CP,5 
(7) (“œ$ > 4) ($V 4)) Taut,3,6 + 
Problem 1.4 
Show that, for all formulas ¢ and 4%, 
F (>(¢ & y) = (74 V 7y)) 


We are now ready to gather together the different techniques for finding 
formal proofs. Some of them depend on considering the logical form of the 
assumption formulas. Others are based on looking at the logical form of the 
formula that we are aiming to derive from the given assumptions. 
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Suppose that we are aiming to derive a conclusion w from a given set of You might find it useful when you 


assumptions ¢, 69,..., dx. review your work so far, for 
instance when revising for the 
(T1) Begin by using the Assumption Rule to introduce each of the exam, to see how these techniques 
formulas $1, @5,...,0, as assumptions. have been used in earlier examples 


l a ? D f in this unit and in Unit 5. 
(T2) When an assumption begins with one or more universal quantifiers, 


use the UE Rule to eliminate these quantifiers. 


(T3) When an assumption is an existential formula of the form 3v 9, 
introduce ĝ as an assumption with a view to a later use of the EH Rule. 


(T4) When the desired conclusion w is a negation of the form —8, introduce 
0 as an assumption, aim to derive a contradiction, and then use the 
proof by contradiction method. 


(T5) When the desired conclusion w is a conjunction of the form (8 & x), 
aim to derive each of the formulas @ and x separately, and then use 
the Tautology Rule to derive (6 & x). 


(T6) When the desired conclusion ~ is a disjunction of the form (0 V x), aim 
to derive the implication (~ — x), and then use the Tautology Rule 
to derive (0 V x). 


(T7) When the desired conclusion % is an implication of the form (6 > x), 
introduce ĝ as an assumption, aim to derive x, and then use the 
CP Rule. 


(T8) When the desired conclusion ~ is a bi-implication of the form (@ -> x) 
aim to derive each of the implications (9 — x) and (x — 0) separately, 
and then use the Tautology Rule to derive (0 > x). 


(T9) When the desired conclusion w is a universal formula of the form Vv 6, 
aim to derive 0, and then use the UI Rule. 


(T10) When the desired conclusion w is an existential formula of the form 
dv 0, aim to derive 6(7/v) for some term 7, and then use the EI Rule. 


(T11) Remember that crucial steps in a derivation are often provided by use For example, in many proofs one 


of the Tautology Rule. uses techniques (T2) and (T3) to 
x f 3 peel off quantifiers from the 
(T12) If you are trying to derive a formula 0 and nothing else seems to work, assumptions in order to obtain 


try using the proof by contradiction strategy of assuming 70 and formulas without quantifiers to 
aiming to derive a contradiction. which the Tautology Rule is then 
applied, for instance to obtain a 
contradiction. 
Example 1.7 


We show that, for all formulas ¢ and 4, 
du 7g, Wulo V y) F Wwy 
Following (T1) we begin by introducing the following two assumptions. 
ERT E E eaTo Ass 
2 (2) Ww(ọVẹ) Ass 
We are guided by (T3) and (T2), respectively, for lines 3 and 4. 
Sues) $ Ass 
2 (4) (V4) UE,2 


Next, we turn our attention to the desired conclusion, Ju w. (T10) suggests 
that we should aim first to derive 7 and then to use the EI Rule. Since none 
of the earlier techniques seems to offer any hope of further progress, we turn 
our attention to (T11) and look to see if we can use the Tautology Rule to 
derive % from formulas that we already have. 


14 


By thinking about the meaning of the connectives it should not be difficult 
to spot that 7 is a tautological consequence of the formulas =@ and (¢ V w) 
on lines 3 and 4. This can be confirmed by checking that the formula 

((-¢ & ($ V Y)) > 4) is a tautology. We can thus add the following line. 


2,3 (5)  Taut,3,4 


Now we can complete the proof in the way we have planned. Note that the order of these last 
two steps cannot be reversed. An 
2,3 (6) Wwy EI,5 application of the EH Rule to 
162 (7) Iwy EH,6 line 5 would not be valid as, in 
general, % will contain free 
The complete proof is as follows. occurrences of the variable v. 


i (soe Ass 


2 (2) Vu(dVy) Ass 

3 (3) æ Ass 

2 (4) (vv)  UB,2 

28 (5) % Taut, 3, 4 

2,3 (6) wy EL,5 

1,2 (7) wy EH, 6 ry 
Problem 1.5 


Show that, for all formulas ¢ and W, 
du ($ > Y), wo wy 


Example 1.8 
We show that, for all formulas ¢ and W, 
du o, Ww (Y > ng) F AV 
Following (T1) we begin our proof in the obvious way. 
To wo Ass 
2 (2) Ww(y— ~o) Ass 
The next steps are in line with (T3) and (T2), respectively. 
3 (3). @ Ass 
2 (4) (¥—+-¢) UE,2 
Now we turn our attention to the desired conclusion, =Vu w. Since this 


formula begins with the negation symbol, we shall aim to follow (T4). This 
leads to the following line. 


5 (5) Woe Ass 


Since this latest assumption begins with a universal quantifier, our next 
move is to follow (T2) and remove it. 


5 (6) y UES 


We are aiming to derive a contradiction. We already have ¢ on line 3, so we 
shall obtain a contradiction if we can also derive =¢. The Tautology Rule 
will almost certainly be needed, and we should be able to spot that 7¢ is a 
tautological consequence of the formulas on lines 4 and 6, since 

((w & (Y > 7¢d)) > 7¢) is a tautology. So we are able to continue as follows. 


sal A) ) ea Taut, 4,6 
2,3,5 (8) (f & =p) Taut,3,7 


Having obtained a contradiction, we can apply the proof by contradiction 
method as planned. 


2,3 (9) (Wuy—(P&-7¢g)) CP,8 
2,3 (10) -Wwy Taut, 9 
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Since the variable v has no free occurrences in either the formula =Vv Y on 
line 10 or the assumption Vv (Y — 7@) on line 2, we can now complete the 
proof by making the intended application of the EH Rule. 


1,2 (11) -Ww EH,10 


Thus the complete proof is as follows. 


1 (1) dvd Ass 

2 (2) Ww(y—> -7¢) Ass 

Sesh Y Ass 

2 (4) (~—>-4) UE, 2 

5 (5) Vow Ass 

Hie (6) me UE, 5 
PS TOES Taut, 4,6 

2,3,5 (8) (¢&-7¢) Taut, 3, 7 
2,3 (9) (Vuy — (¢&-4)) CP,8 
2,3 (10) -Wwy Taut, 9 
1,2 (11) -wy EH, 10 è 
Problem 1.6 


Show that, for all formulas ¢ and 4%, 
Vu ¢, w (y > 7g) F ~Vuw 


Example 1.9 
We show that, for all formulas ¢, w and 6, 


Yu 0, w (Ad V Y) F (Wud = -Www n(Y & 0)) 


We begin our proof in the standard way by introducing the two given 
assumption formulas and then using (T2) and (T3) as appropriate. 


1 (1) WA Ass 
2 (2) Av(-dVy) Ass 
1 (3) 0 UE, 1 


4 (4) mov y) Ass 


Next we turn our attention to the formula (Vu ¢ — 7Vu 7(y & 0)) that we 
are aiming to derive as a conclusion. Since this is an implication we make 
use of (T7) to obtain the following line. 


5 (5) Wwwọ Ass 


Now, following (T7), we are aiming to derive Vu 7(w & 0). Since this begins 
with the negation symbol, we follow (T4) to introduce one more assumption, 
namely the desired conclusion with the initial negation symbol omitted. 


6 (6) Vu7A(w&) Ass 


We now aim to derive a contradiction. Since the last two assumptions we 
have introduced begin with universal quantifiers, we follow (T2) to get the 
next two lines. 


5 (7) ¢ UE, 5 
6 (8) -(b&6) UE,6 


How can we achieve a contradiction? There is more than one possibility 
here, but one way is to note that we have a negated formula 7(w & 0) on 
line 8 and hence we would obtain a contradiction if we could also derive 

(Y & 0), and we would be able to achieve this if only we could derive each of 
the formulas y and @ separately. We already have 6 on line 3, so all we need 
to do to achieve our aim is to derive w. 
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Note that on line 4 we have (=¢ V w) and on line 7 we have ¢. The formula 
q) is a tautological consequence of these formulas, since the formula 


((¢ & (Ad V w)) > Y) is a tautology, as you can easily check. 


We can thus achieve our aim of getting a contradiction as follows. 


You may recall that we used 
essentially the same tautology in 
Example 1.7 to derive line 5 of the 
proof given there. 


4,5 (9) 4% Taut, 4,7 
1,4,5 (10) (w&@) Taut, 3,9 
1,4,5,6 (11) ((W¥&6)&-7~(W&6))  Taut, 8,10 
We can now complete our strategy of using proof by contradiction. 
1,4,5 (12) (Wor>(p & 8) > ((p & 0) & +(&8))) CP, 11 
1,4,5 (13) -Vu7A() & 6) Taut, 12 


We can now apply the CP Rule as saw we intended when we used (T7) to 


introduce Vu ¢ as an assumption on line 5. 
1,4 (14) (Wud > -Vu-7(v & 6)) 


Finally we complete the proof with a use of the EH Rule, as 
when we used (T3) to create line 4. 


1,2 (15) (Wu¢— -7Vu-(W & 0)) EH,14 
It should be evident that this use of the EH Rule is valid. 


CP, 13 


Thus the complete proof is as follows. 


1 (1) WA 
2 (2) dv(-dV yy) 
i 13) 
4 (4) EAV) 
5 (5) Wud 
6 (6) Vur(w & 8) 
5 (7) ¢ 
6 (8) 7(y&6) 
4,5 (9) 4% 
1,4,5 (10) (wW&@) 
1,4,5,6 (11) ((Y& 0) & ~(v&8)) 
1,4,5 (12) (Wur>(p& 8) > ((Y & 0) & -y & 0))) 
1,4,5 (13) -Ww~(y& 6) 
1,4 (14) (Wud —-Ww-(y & A)) 
1,2 (15) (Wud -Ww-(y & 6)) 
Problem 1.7 


Show that, for all formulas ¢, w and 9, 
Vu ($ — 0), w (Y V 74) F (Wud > -Wv 7(p & 0)) 


we intended In this example, the last two steps 


in the proof could have been 
carried out in the reverse order. 
We could have applied the EH Rule 
to line 13 and then the CP Rule. 


UE, 5 

UE, 6 
Taut, 4,7 
Taut, 3,9 
Taut, 8, 10 
CP, 11 
Taut, 12 
CESIS 


EH, 14 6 


The practical question of how to spot the appropriate tautologies when 
seeking to find formal proofs is an important one. Most proofs involve a use 


of the Tautology Rule at some stage, and this requires being 


able to 


recognize when this rule can be applied. We discuss this in more detail in 


the next subsection, where we list some standard cases. 
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1.3 Some standard tautologies 


We have seen that in most formal proofs we need to use the Tautology Rule 
at least once. Use of this rule depends on being able to spot-when a formula 
we are aiming to derive is a tautological consequence of formulas that have 
already occurred in a proof. In theory this is a straightforward problem, as 
there is an algorithm for deciding the matter. The formula 4 is a 
tautological consequence of ¢,,¢9,...,, if and only if the formula 


(C (G1 & 2) & 63) +++ & pr) > V) 
is a tautology, and this can be determined using the truth table method. 


However, from a practical viewpoint, we don’t want to spend a lot of time 
checking formulas which turn out not to be tautologies. So in this subsection 
we list a number of standard cases of tautological consequence which are 
frequently useful. We also indicate a method for checking whether formulas 
of the above form are tautologies that is often more efficient than calculating 
the full truth table. 


We begin with a simple example to explain the notation we are going to use. 
We have already seen that, for all formulas ¢ and w, the formula (¢ & w) is a 
tautological consequence of ¢ and 7. Thus, whenever two formulas ġ and w 
occur in a proof, we can derive the formula (¢ & Y) on any subsequent line. 
When we do this the formula (¢ & y) will depend on all the assumptions in 
force on the two lines on which the formulas ¢ and w occur. We indicate this 
by writing 


QW 
(¢&y) 
In general, we shall write 
$1, P23- - -3k 
Y 


to indicate that the formula ~w is a tautological consequence of the formulas 


Pr: Pas+++ Pk 


Here then is our list of some standard cases of tautological consequence 
which are often useful. In each case, the claim that it is a tautological 
consequence can be justified by checking that the corresponding formula is a 
tautology. 


| bY > Oky , Gey 
GEY $ m 
1 OVW , OVD 
= P 
Civile (6V-W), d 
s y} f $ 
TEN TEE (bv), (b>) 
$ y i n pei E 
PREEN TTA (b> ¥), (w= 4) 
ans EA ANa se 
Ten eee 
aa E 
Cm el 
ae eee eee ee 
z230 b (¢ & =¢) 
18 3 19 zg 20 z 
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Many of the tautologies used in the logical proofs in Unit 5 and in this unit 
are from this standard list. For example, in Example 1.9, standard 
tautological consequence 6 is used on line 9, standard tautological 
consequence | is used on lines 10 and 11, and standard tautological 
consequence 9 is used on line 13. You may care to look out for where these 
standard tautological consequences are used later in this unit and in 
subsequent units. 


We have already noted that to decide whether a formula w is a tautological 
consequence of the formulas ¢,,¢5,...,;, we need to check whether the 
formula 


((- ++ ((Gy & p2) & 3): & pr) > Y) 


is a tautology. One way to do this is to calculate the full truth table of the 
formula (1.1). However, a good deal of the work that this involves can be 
saved by taking advantage of the form of (1.1) as an implication. If any of 
the formulas ¢,, ¢5,..., p has the truth value 0, then, using the truth table 
for &, we see that the conjunction (---((¢, & $2) & 3) --- & p) also has the 
truth value 0. It then follows that the whole formula (1.1) has the truth 
value 1, as is readily seen from the truth table for —. Thus there is no need 
to work out in full any line of the truth table for (1.1) in which any of the 
formulas ¢,,9,...,, has the truth value 0. Another way to put this is 
that, in checking to see whether (1.1) is a tautology, we need only consider 
those cases in which each of ¢,,¢5,..., 0, has the truth value 1. 


(1.1) 


We illustrate this by returning to Example 1.9. The three successive uses of 
the Tautology Rule on lines 9, 10 and 11 in that example could have been 
replaced by a single use of this rule given by the line 


1,4,5,6 (9) ((W&0)&-7(W&O)) Taut,3,4,7,8 


This is because the formula ((w & 0) & 7(7 & 0)) is a tautological 
consequence of the formulas 0, (-=¢ V Y), @ and 7=(7 & 0). To justify this 
claim, we need to check whether the formula 


(((0 & (e V )) & p) & (Y & 0)) => ((W&O) & (H & 0))) 


is a tautology. The full truth table for this formula has eight lines, but we 
need only check those lines in which 6, (~¢ V Y), ¢ and 7(7 & 0) are all 
true. In particular 6 and ¢ must both get the truth value 1, and so we need 
only check two lines of the truth table, according to whether w is true or 
false. We do this now. 


((@& (7 ¢ VY) & 6) & +> (H&4A)>(Y&A) & = (W&D))) 


iene T elie cD Oreditsl tte StS <0 01 Td 
On OW, 0: OrcOMS T0ate OF 0a Ono 1 oO, 1 On Oil: 


OD®OO® © OOOOOOOO OOOOOOOO® 


From column (7) we see that the whole formula always has the truth value 1 
and hence is a tautology. 


Problem 1.8 


Show that, for all formulas ¢, ~ and 0, the formula 7(w —> 0) is a 
tautological consequence of the formulas ¢, (~¢ V Y) and 76. 


In our formal system, the Tautology Rule validates any deduction where one 
formula is a tautological consequence of other formulas. There are infinitely 
many different ways of using this rule, since there are infinitely many 
different tautologies of the form (1.1). However, in practice, we make use of 
a rather small set of simple special cases of this rule, such as those listed 
earlier as standard cases of tautological consequence. 


You may also care, perhaps during 
revision for the exam, to work out 
where these standard tautological 
consequences have been used in the 
logical proofs in Unit 5 and earlier 
in this unit. 


The proof would then continue 
with lines 12 to 15 of Example 1.9, 
suitably renumbered. 


As the formula is so complicated, 
we have included the order in 
which we have worked out the 
truth values of the columns. Note 
that once we have discovered that 
all the values in the column 
labelled with © are 0, we know 
that the final values in column (7) 
must all be 1. 
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2 THE FORMAL SYSTEM COMPLETED 


In this section, we shall complete our formal system by giving rules for 
handling the identity symbol =. Plainly such rules will be vital for proving 
statements of number theory, which are fundamentally built up using the = 
symbol. We shall also discuss two very important results about the formal 
system, the Correctness Theorem and the Adequacy Theorem, which 
connect what can be derived within the system with logical consequence. 


2.1 Identity rules 


In Unit 5 we introduced the rules of proof of our formal system which deal 
with the connectives and the quantifiers. We now complete the formal 
system by describing two rules relating to the identity symbol: an 
introduction rule and a substitution rule. 


The introduction rule is very straightforward. It is based on the principle 
that anything is identical to itself. 


Definition 2.1 Identity Introduction Rule (II) 


For each term 7, the formula The rule is plainly logically valid 
and it is easy to see that a machine 
ile T, could check whether a formula has 


i i his form. 
may be written down on any line of a formal proof, and does not ae 


depend on any assumptions. 


Example 2.1 
We show that 


Fwy =w 
The following formal proof establishes this claim. 


EO E II 
(2) Vou=o- Ul 


Note that since line 1 does not depend on any assumptions, the use of the 
UI Rule on line 2 is legitimate since, vacuously, the variable v does not occur 
freely in any of the assumptions on which line 1 depends. ¢ 


As we can use the Identity Introduction Rule on any line of a formal proof, 
it shares with the Assumption Rule the property that it can be used on the 
first line of a proof. None of the other rules of our formal system has this 
property. So each formal proof must start with either a use of the 
Assumption Rule or a use of the Identity Introduction Rule. 


The second rule for the identity symbol corresponds to the principle that 
‘equals can be substituted for equals’. That is, if two terms 7, and T2 have 
been shown to be equal in the sense that we have derived the formula 

Tı = T2, and, for some formula ¢, we have also derived the formula (n/v), 
then this principle suggests that we should be able to substitute 72 for 7 
and hence derive the formula $(72/v). 


There is, however, a technical difficulty, in terms of logical validity, in We met a similar technical 
transferring this principle into a rule of our formal system. This is because difficulty when introducing the 
there may be variables in 7, or T2 that become bound when one of these UE Rule in Unit 5. 

terms is substituted for the variable v in ¢. Here is an example of what can 

happen. 
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Let ¢ be the formula 
Jyy = (x + 0’) 


and let 7; and 72 be the terms 0” and (y + 0’), respectively. Then 7, = 72 is 
the formula 


0” = (y +0’) (2.1) 
¢(71/x) is the formula 

dy y = (0” + 0’) (2.2) 
and $(72/z) is the formula 

ayy = ((y + 0’) + 0’) (2.3) 


Formula (2.1) is true in the standard interpretation ./ if we interpret the 
variable y as referring to the number 1. Formula (2.2) is also true in.% but 
formula (2.3) is not true in this interpretation. What has gone wrong is that 
the variable y in the term (y + 0’) becomes bound in formula (2.3). 


To avoid this difficulty, we need to ensure that 7, and 72 are freely 
substitutable in ¢, so that no variables become bound. 


Definition 2.2 Substitution Rule (Sub) 


Suppose 7; and T2 are terms which may be freely substituted for the This rule can be shown to be 
variable v in the formula ¢. Let ¢, be a formula which results when logically valid. It is easy to see that 
some (but not necessarily all) of the free occurrences of v in ¢ are 


a machine could check whether the 


replaced by 71, and let @, be the formula which results when these Tue nas. heen, Appling eorinetly, 


same occurrences of v are replaced by 72. Then, if on two lines of a 
formal proof the formulas 7; = 72 and ¢, occur, on any subsequent line 
we may introduce ¢,, which will depend on all the assumptions in force 
on the lines on which the formulas 7; = T2 and ¢, occur. 


We now give some examples of formal proofs which make use of the identity 
rules. 


Example 2.2 
We show that 


FYrVy (t =y >x" =y") 


N =y Ass 
(2) 2’ =a! II 
ay En Sub, 1,2 
(4) (z=y>zxr' =y’) CP,3 
(5) Wy(t@=yr2'=y') UL4 
(6) Yzy (t= y= 2 =y UL5 


In terms of the notation used in stating the Substitution Rule, we have the 
following. The formula ¢ is x’ = x’, Tı is the term x and 7 is the term y. 
Thus the formula on line 1 is 7; = T2. The formula on line 2 is ¢,. It may be 
regarded as having been obtained from ¢ by replacing the second occurrence 
of the variable x by the variable x. Then ¢,, the formula on line 3, is 
obtained from ¢ by replacing the second occurrence of x by an occurrence 
of y. 


More briefly, the use of the Substitution Rule is justified since the formula 
on line 3 is obtained from the formula on line 2 by substituting the variable 
y for the second occurrence of x, and x = y is the formula on line 1. 4 
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Example 2.3 
We show that 


FVaVy(2=yoy=2) 


i (1D) ey, Ass 
(2) =r II 

TR) ye Sub, 1, 2 
(4) @=yoy=2)  —OP,3 
(5) Vai =a =y =T) UI,4 


“Vy(z=yroy=2 ,5 
6) Yzy UI 


The use of the Substitution Rule on line 3 is justified since the formula on 
this line is obtained from the formula on line 2 by substituting the variable y 
for the first occurrence of x, and x = y is the formula on line 1. 4 


Problem 2.1 

Establish the following. 

(a) H Wey Vz (z = y > (z + z) =(2+y)) 
(b) KVaVyVz2(2 =y—- AUE EE E) 


There is a feature of the Substitution Rule that we need to be careful about, 
and which is alluded to in the solution to Problem 2.1(b). The order of the 
terms 7, and Tə in the statement of the rule in Definition 2.2 is critical for a 
correct use of the rule. Put somewhat loosely, given 7; = T2 the rule allows 
us to substitute T2 for 7,, but it does not permit the substitution of 7, for T2. 
The following will make this distinction more precise. The first three lines of 
the proof of Example 2.2 are as follows. 


(1) rye ASS 
Ores =o" oll 
ER) oye meee 
These three lines constitute a formal proof which shows that 
z=ylt a’ = y'. However, to show that y= «+ 2’ = y’, which is indeed 
true, it is not enough to replace the formula z = y on line 1 by y= x. This 
would give the following ‘proof’. 


1 (1) ae A3 Warning! This is not a correct 
a proof! 
(2) eo ol 
a(S). ee tee Seek 2 
The use of the Substitution Rule on line 3 is not correct. The formula on We ask you to give a correct formal 
line 3 has been obtained from that on line 2 by substituting y for the second proof to show that y = a F a’ =y 
occurrence of x, and it is claimed that this substitution is justified by the in Problem 2.2(a). 


occurrence of the formula y = x on line 1. However, this is not a 
substitution which the Substitution Rule allows. If we apply this rule to the 
formula y = x, we are only allowed to use it to substitute x for occurrences 
of y but not the other way round. 


Since a rule which also permitted substitutions in the other direction would 
also be logically valid, you may wonder why we formulated the Substitution 
Rule to permit substitutions just in one direction. It is a matter of economy 
in setting up our formal system, a point we remarked on in the Introduction 
to this unit. Substitutions in the other direction are easily catered for using 
our Substitution Rule since, if we are given the formula 7; = T2 and want to 
substitute 7 for T2, rather than Tə for 7,, in some other formula, we can 
always first derive the formula 72 = 7, by an adaptation of the first three 
lines of the proof in Example 2.3, as follows. 
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1 (1) Ti = T2 Ass 
(2) Ti = T1 II 
ea.) eT — Tie OE2 
We can then use the Substitution Rule to substitute 7; for Tə in some other 
formula, provided that all the requirements of the rule are satisfied. 


With care, the restrictions of the Substitution Rule need not be too great, as 
the following example shows. 


Example 2.4 
We show that 


xz=yF ((e@+y)+2) =((y+z)+y) 


Of course, we start the formal proof in the standard way by introducing the 
formula x = y as an assumption. The next step is to find a term 7 such that, 
by substituting y for some of the occurrences of x in the formula 7 = 7, we 
obtain the formula ((x + y) + x) = ((y+ x) + y) at which we are aiming. If 
we achieve this, we can use the II Rule to introduce the formula 7 = 7 into 
our proof, and we can then achieve our desired conclusion by a single use of 
the Substitution Rule. We hope that you will agree that we have made the 
optimum choice of the term 7. 


Gh) et Ass 
(2) ((@+2)+2)=((e@+2)+2) I 
1 (3) (@+y)+2)=((y+a)+y) Sub,1,2 
The formula on line 3 has been obtained from that on line 2 by substituting 


y for the second, fourth and sixth occurrences of x. This is a legitimate use 
of the Substitution Rule since we have the formula x = y on line 1. ¢ 


Plainly, formal proofs of theorems about number theory are going to involve 
more complicated uses of the Substitution Rule than those we have seen in 
this subsection. We shall see such uses in Unit 7, when we discuss formal 
theorems in the system Q, the axioms of which we shall introduce in 
Subsection 3.2. 


Problem 2.2 
Establish the following. 

(CN) 7 See ant 

(b) c=yF ((y-x)-y) =((x-y) +2) 


2.2 Correctness and adequacy 


You have now met all nine rules of proof of our formal system: the 
Assumption Rule (Ass), the Tautology Rule (Taut) and the Conditional 
Proof Rule (CP), introduced in Section 1 of Unit 5; the Universal Quantifier 
Elimination Rule (UE) and the Universal Quantifier Introduction Rule (UI) 
introduced in Section 2 of Unit 5; the Existential Quantifier Introduction 
Rule (EI) and the Existential Hypothesis Rule (EH) introduced in Section 3 
of Unit 5; and the Identity Introduction Rule (II) and the Substitution Rule 
(Sub), introduced in the previous subsection. The nine rules of proof, 
together with the formal language and its rules discussed in Unit 4, complete 
our description of our formal system. So it is now time to discuss some 
important results about the system. 


Recall that, in Section 1 of Unit-5, we said that the formal proofs of our 
formal system should be machine-checkable and logically valid. 


23 


For a formal proof to be machine-checkable, it is sufficient that each step of 
the proof be machine-checkable. This will be the case provided that, for each 
rule of proof, there is an algorithm for determining whether it has been 
applied correctly. We hope that our informal discussions of this issue in 
Unit 5 and in this unit have convinced you that such algorithms exist. We 
shall not go into any further detail here. 


We do, however, need to look at the logical validity of formal proofs in more 
detail. Recall that a formal proof of a formula 7 from assumptions 

$1, 2,-++;, is logically valid provided that 7 is a logical consequence of 
the formulas ¢,, ¢9,...,@,, in other words provided that w is true in every 
interpretation in which each of the formulas ¢,, ¢9,...,¢, is true. Implicit 
in this definition is the fact that the set of assumptions is finite. Later, 
however, when investigating possible sets of axioms for number theory, we 
shall want to consider infinite sets of assumptions. To this end, we need to 
amend our definition of logical consequence, and for good measure to 
provide a formal definition of derivation. 


Definition 2.3 Derivation and logical consequence 


Let S be a set of formulas and ~ a formula. 


We say that w is derivable from S if there is a formal proof of ~ from 
assumptions which are all in the set S. Such a proof is called a 
derivation of yw from S. 


We say that 7 is a logical consequence of S if w is true in every 
interpretation in which all the formulas of S are true. 


A key point to note is that any formal proof is finitely long, so that, even if 
S is infinite, a proof of 7 from S$ uses only finitely many assumptions 

from S. There is a further, subtle, issue in the case when the set S is 
infinite: is there an algorithm for checking whether a given derivation of w is 
a derivation from S$? Since our formal system is machine-checkable, we know 
that there is an algorithm which will check whether the derivation is correct 
and which will identify the assumptions on which % depends. But if S is 
infinite, there might not be an algorithm for checking whether these 
assumptions are in S — this issue will underly much of our subsequent work 
on using the formal system for number theory. 


In light of our new, extended, definition of logical consequence, we should 
now state that, in order to show that the formal proofs of our system are 
logically valid, we need to show that, if w is derivable from assumptions in a 
set S, then wy is a logical consequence of S, that is, 7 is true in every 
interpretation in which all the formulas of S are true. As before, the method 
for doing this is to show that, in a formal proof, the formula which appears 
on a given line is always a logical consequence of the assumption formulas on 
which that line depends. However, we don’t need to check each formal proof 
individually: as was discussed in Unit 5, it is sufficient to check that each of 
the nine rules of proof of our formal system is logically valid, in other words 
that whenever a rule is applied to earlier lines on which the formula is a 
logical consequence of the assumptions, this remains true for the line of the 
proof obtained using the rule of proof in question. We have already checked 
this, in Unit 5, for the Assumption, Tautology and Conditional Proof Rules. 
As we have indicated in Unit 5 and in this unit, it is possible to check that 
all the other rules of proof also have this property, though, since the 
arguments generally involve a number of not very illuminating technical 
details relating to free occurrences of variables, we have omitted them: we 
hope that our informal discussions of these rules make it plausible that they 
are logically valid. Taking this on trust, we are able to state the following 
theorem. 
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A full proof that the proofs of our 
formal system are 
machine-checkable would involve 
translating this requirement into 
the language of recursive functions, 
and checking that the relevant 
functions are recursive, in an 
analogous way to that in which we 
discussed URM computations in 
Unit 3. 


Recall that, in the Introduction to 
Unit 5, we informally equated the 
idea of derivation with that of 
formal proof. 


The set S may be infinite. 


Note that this covers the case 
where we have a formal proof of w 
from no assumptions. 


When S is finite, there is no 
problem. The formulas in S can be 
put in a finite list and any 
assumption can be compared with 
each formula in the list in finitely 
many steps. 


For the details of the arguments, 
consult the Suggestions for Further 
Reading in Unit 8. 


Theorem 2.1 Correctness Theorem 


If S is a set of formulas and w a formula such that ~ is derivable from 
S, then ~ is a logical consequence of S. 


In particular, it follows from this theorem that if w is a formula which is 
provable from no assumptions, that is F %, then 7 is true in every 
interpretation of our formal language. 


Problem 2.3 
Show that it is not the case that, for all formulas ¢, 


+ (Va dy bd > Jy Vz ¢) 


The Correctness Theorem tells us that if % is not a logical consequence of S 

then there cannot be a formal proof of y from assumptions in S. Thus, if we 

can spot that ~ is not a logical consequence of S, then we know that there is 

no point in trying to derive ~ from S. For example, suppose we want to try In this and other examples, it is 

to prove =3v 0 from the assumptions ¢ and Vv (74 V ad). To see that there sometimes possible to ensure that 

is no point in trying to do this, suppose that 6 is the formula v = 0 and that ¥ İS a logical consequence of S by 
{ restricting the free occurrences of 

¢ is the formula ~v = 0. The formula Wv (=6 V ~g) becomes E, anpe 

Vu (~v = 0 V 77v = 0), which is true in all interpretations. However, in the if v does not occur freely in 4, then 

standard interpretation if we give v the value 3, say, then both ¢ and Jv 6 is a logical consequence of ¢ 

Yu (70 V 7¢) are true but Jv 0, which is the formula ~3v v = 0, is false. and Wv (+0 V -@), as we saw in 

Thus ~v v = 0 is not a logical consequence of ¢ and Vu (~0 V =¢) and so Example 1.4. 

there would be no point in trying to derive =Jv v = O from these 

assumptions, as the Correctness Theorem tells us that no such formal proof 

can exist. 


It is natural to ask if the converse of the Correctness Theorem is true. If the 
formula 7 is a logical consequence of the set of formulas S, does it follow 
that w is derivable from S? That is, will there necessarily be a formal proof 
of ~ from finitely many assumptions ¢,,¢5,...,; in S? This is a deep 
question which amounts to asking whether our formal system is adequate for 
deriving all logical consequences that can be derived within our system. 
Indeed, more than 50 years elapsed between the first formulation of a system 
of formal logic similar to that presented here (published by Frege in 1879) 
and the proof that the answer to our question is ‘yes’ (published by Gédel 
in 1930). In fact, it took some time for the question about the adequacy of 
the system even to be asked! 


Because of the difficulty of the proof, we content ourselves just with stating For a proof, consult the Suggestions 
the theorem which gives the answer to our question. for Further Reading in Unit 8. 


Theorem 2.2 Adequacy Theorem 


If S is a set of formulas and ~ a formula such that 7 is a logical 
consequence of S, then y is derivable from S. 
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At this point we need to remind ourselves that the main focus of our interest 
is number theory. We seek to develop the formal system so it can prove 
results of number theory. At the moment we are unable to give formal 
proofs of such obviously true statements of number theory as 


Va (x +0’) = 2’ 


But this is not surprising. None of our rules makes any reference to the 
standard interpretation of the arithmetical symbols. Indeed we have made 
sure that our rules are logically valid, so that the formulas we can prove 
without any assumptions are those which are true in all interpretations. The 
formula above, though true in the standard interpretation 1% is not true in 
every interpretation. Hence it is not possible to derive it in our system 
without using any assumptions. So we need to add some ‘axioms for 
arithmetic’ which express the basic properties of the arithmetical symbols. 
We begin this task in the next section. 


3 AXIOMS FOR NUMBER THEORY 


In this section we shall explain how to use our formal system to prove some 
non-trivial statements of number theory. This requires us to make precise 
what we mean by a theory and by the axioms and theorems of a theory, 
which we do in Subsection 3.1. Subsection 3.2 then gives some axioms for a 
fragment of number theory. 


3.1 Theories and theorems 


In everyday mathematics the term ‘theory’ is frequently used, but is not 
precisely defined. We speak, for example, of ‘the theory of groups’, ‘chaos 
theory’ or, indeed, ‘number theory’. In our work in mathematical logic, 
‘theory’ has a precise definition. 


Our definition of a theory depends on the notion of a sentence, by which, as 
you may recall, we mean a formula of the formal language that contains no 
free occurrences of variables. The lack of free occurrences of variables in 
sentences makes them very useful since this property ensures that, in any 
given interpretation of the formal language, a sentence ® is either always 
true or always false: there are no free variables in ® for which we need to 
provide values in order to determine the truth or falsehood of the formula. 
Furthermore, we can use sentences in formal proofs without having to worry 
about whether they satisfy the conditions on free variables that apply in 
some of the rules of proof. These attractive properties explain why we base 
our definition of a theory upon them. 


Definition 3.1 Theory, axioms, theorems 


Let S be a set of sentences of the formal language. The set of all 
sentences which are derivable in the formal system from assumptions in 
the set S is called the theory of S and written as Th(S). S is said to 
be a set of axioms of the theory. 


A set of sentences T is said to be a theory if it is Th(S) for some set of 
sentences S. The sentences which are in T are called theorems of T. If 
a sentence ® is a theorem of T, we indicate this by writing 


Fr ® 
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We adopt the practice of using 
capital Greek letters for sentences. 


A theory can have several different 
sets of axioms. See Example 3.1. 


In some books, the sentences in T 
are called theorems of the set S' of 
axioms. 


It follows from the Correctness and Adequacy Theorems that a sentence Y is W is the Greek letter ‘capital psi’. 
derivable from S if and only if Y is a logical consequence of S, so we could 

equally well define the theory Th(S) as the set of all sentences which are 

logical consequences of S. It is sometimes more convenient to establish 

results about theories using logical consequence rather than derivability 

within the formal system. For instance, any theory T is closed under 

derivation, as we show using logical consequence in the following theorem. 


Theorem 3.1 Closure under derivation 


Let T be a theory. Then, for all sentences Y, if Y is derivable from T 
then UV ET. 


Proof 


Let the theory T have as axioms the set of sentences S, so that T = Th(S). 
Suppose W is a sentence derivable from T. For V to be in T, we need to 
show that W is derivable from S. 


As T = Th(S) consists of all sentences which are logical consequences of S, If you would like to try your hand 
then, for any interpretation in which all sentences of S$ are true, all sentences at proving Theorem 3.1 directly 
of T are true. As W is derivable from T, then, by the Correctness Theorem, “Sing the formal system, rather 

: 3 ; a : f than going via the Correctness and 
Visa logical consequence of T, so that in this interpretation WV is true. Adequacy Theorems, look at 
Thus W is a logical consequence of S and, by the Adequacy Theorem, Additional Exercise 2 for Section 3. 


derivable from S$, so is in Th(S) = T. a 


Problem 3.1 


Let S be a set of sentences. Show that every sentence W in S is in the theory 


Th(S). 


It is useful to have a special name for an interpretation in which all the 
theorems of a theory are true. 


Definition 3.2 Interpretation of a theory 


An interpretation of a theory T is an interpretation of the formal 
language in which all the theorems of the theory are true. 


Part of the proof of Theorem 3.1 shows that, if S is a set of sentences, then 
any interpretation of the formal language in which all the sentences of S are 
true is also an interpretation of the theory Th(S). This can be rephrased as 
the following theorem. 


Theorem 3.2 


If T is a theory with axioms S, then any interpretation of the formal 


language in which all the sentences of S are true is also an 
interpretation of T. 


Zh, 


Example 3.1 


If the set S is empty, then Th(S) consists of those sentences Y such that Equivalently Th($) consists of all 
y . . . 

H W, that is, such that W is derivable from no assumptions. Th(S) is not sentences true in all interpretations 

empty: for example, it follows from Example 2.1 that the sentence Vx «=x of the formal language, and can be 


‘s in Th(S described as the set of theorems of 
is in Th(S). quantifier logic (i.e. obtained solely 


If S’ is the set consisting of just the one formula Vaz = x, the theory Th(S’) from the nine rules of proof, 

is equal to Th(S). It is perhaps easier to explain this in terms of logical en ee ee ee 
consequence than in terms of the formal proof system. Suppose that the 

sentence W is in Th(S’), which means that Y is a logical consequence of 

Vauw =a. As Vax = 2 is true in all interpretations of the formal language, it 

follows that W is also true in all interpretations and is thus in Th(S). 

Conversely, any sentence in Th(S) is a logical consequence of the empty set 

of sentences, and thus of any other set of sentences, in particular of S’, and 

is thus in Th(S’). + 


Example 3.1 illustrates that different sets of axioms, in this particular case 
the empty set and the set consisting of the sentence Vz x = x, can give rise 
to the same theory. 


Theorem 3.3 


Let Æ be an interpretation of the formal language. Let T be the set of 
all sentences which are true in.4. Then T is a theory. 


Proof 


To show that T is a theory, we need to identify a set of sentences S for 
which T = Th(S). In this case, one suitable set S is T itself and we shall 
show that T = Th(T). 


By Problem 3.1, every sentence in T is in Th(T). To show the converse, 
suppose that the sentence W is derivable from T. Then it follows from the 
Correctness Theorem that Y is a logical consequence of T. Hence, as all the 
sentences in T are true in the given interpretation, so also is W. Hence 

Y € T. Thus T = Th(7), which shows that T is a theory. a 


One instance of Theorem 3.3 is of particular importance. This is the case 
where the interpretation in question is the standard interpretation . The 
sentences true in./ correspond to what in everyday mathematics we would 
call the truths of number theory. We give this theory a special name. 


Definition 3.3 Complete Arithmetic 


Complete Arithmetic is the theory that consists of all those sentences The reason why we use the word 
of the formal language that are true in the standard interpretation ~. ‘complete’ in this name will emerge 
We shall use the abbreviation CA for this set of sentences. shortly. 


Theories like Complete Arithmetic which consist of all sentences that are 

true in some particular interpretation have two important properties. Let T 
be such a theory. Given any particular interpretation of the formal language 
and any sentence ®, then precisely one of the two sentences ® and —@ is true 
in the given interpretation. Thus one important property of T is that either 
Hr ® or Hr =ð, and the other is that we cannot have both Fr ® and Fr =®. 


We now give two general definitions corresponding to these two properties, 
starting with the second. 
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Definition 3.4 Consistency 


A theory T is said to be consistent if there is no sentence ® of the 
formal language such that both Fr ® and kp 7®. 


If a theory T is not consistent, so that there is some sentence ® such that 
both Fr ® and Fr 9, then T has no interpretations, as no sentence can be 
both true and false in an interpretation. That means that a theory which 
has an interpretation is consistent. In particular, Complete Arithmetic is 
consistent. 


Problem 3.2 


Prove that if T is a theory which is not consistent then every sentence of the 
formal language is a theorem of T, that is, show that for each sentence Y we 
have Fp Y. Hint: Recall, from Subsection 1.3, that, for all sentences ® and 
W, the sentence ((® & =~) — Y) is a tautology. Use this to show how to 
construct a derivation of WV. 


Our second general definition is as follows. 


Definition 3.5 Completeness 


A theory T is said to be complete if, for every sentence ® of the formal 
language, either Fr ® or Fr 7A®. 


Problem 3.3 


Prove that if T is a theory which is both complete and consistent then, for 
every sentence ® of the formal language, precisely one of Hr ® and Hr 7® 
holds. 


From the discussion preceding Definitions 3.4 and 3.5, we see that Complete 
Arithmetic (CA) is a complete and consistent theory. 


It should be noted that the consistency of the theory CA has no bearing on 
Hilbert’s Question, which we mentioned at the beginning of Unit 1 and 
again in the Introduction to Unit 4. Hilbert asked whether the consistency 
of number theory can be proved using only non-dubious principles of finitary 
reasoning. An argument for the consistency of number theory which is based 
on the existence of the standard interpretation, which is an infinite 
mathematical object, certainly does not meet Hilbert’s requirement of a 
consistency proof which only uses finitary reasoning. 


Leibniz’s Question, which we mentioned along with Hilbert’s Question, asks 
if there is an algorithm for deciding which statements of number theory are 
true. This question can now be reformulated in terms of the theory CA as 
follows: 


Is there an algorithm for deciding which sentences of our formal 
language are in the set CA? 


We still cannot answer this question. However, to help us answer it later, 
you should find it plausible that we should search for a finite set of axioms 
for the theory CA. We begin the search for such a set of axioms in the next 
subsection. 


It can be shown that the converse 
is also true: every consistent theory 
has an interpretation. 


The fact that it is a complete 
theory explains its name. 


We shall have to wait until Unit 8 
for an answer to Hilbert’s Question. 


We answer Leibniz’s Question in 
Unit 8 too. 


We already have an infinite set of 
axioms for the theory CA, namely 
CA itself. This follows from 
Theorem 3.3 when T is CA. 
However, such an infinite set does 
not help us to answer Leibniz’s 
Question. 
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3.2 The theory Q 


We noted at the end of Subsection 2.2 that to be able to derive theorems of 
number theory, that is, sentences true in the standard interpretation, we 
need to introduce some axioms which express properties of this 
interpretation. The only sentences derivable in our formal system from no 
assumptions are those which are true in all interpretations; to be able to 
derive other sentences, we need to add some axioms which we can use as 
assumptions. 


We thus seek a set ' of sentences which we can use as axioms for number 
theory, and we then consider the theory Th(S) consisting of all the sentences 
that we can derive using the sentences in S as assumptions. 


When it comes to choosing the axioms which make up S there are a number 
of criteria that we aim to satisfy. 


1 All the axioms in S should be true in the standard interpretation / 

2 There should be an algorithm to determine whether a given sentence is 
in S. 

3 We should be able to derive as many theorems as possible from the 
axioms. 


4 The set of axioms should be as simple as possible. 


The first two of these criteria are precise requirements for our set S of 
axioms. By Theorem 3.2, criterion 1 will ensure that all the theorems 
derived from the axioms are true in the standard interpretation, so that (by 
the remark following Definition 3.4) the theory Th(S) is consistent. Since we 
require number theory to be consistent, criterion 1 is clearly an essential 
requirement for any set of sentences which could be considered as a set of 
axioms for it. Criterion 2 will ensure that there is an algorithm for deciding 
whether a purported proof is really a proof in our formal system of a 
formula 7 from assumptions which are all axioms in S. Thus criterion 2 is 
another essential requirement. 


Criteria 3 and 4 are not quite so precise and they pull us in opposite 
directions: criterion 3 suggests that a large set of axioms might be sensible 
whereas criterion 4 suggests that we should look for a small set. In fact, the 
ideal way to achieve criterion 3 would be to find a set of axioms which meets 
criteria 1 and 2, and which enables us to derive as theorems all sentences 
true in the standard interpretation. In Unit 8, we shall prove that this is not 
possible: it forms the content of Gédel’s First Incompleteness Theorem. So 
it makes sense to settle for a simple set of axioms, thus satisfying criterion 4, 
which meets criteria 1 and 2 and also enables us to derive as many theorems 
as possible, thus satisfying criterion 3. 


However, at this point we need to remember that our ultimate goal is to 
prove Gédel’s Incompleteness Theorems and to answer Leibniz’s and 
Hilbert’s Questions. It turns out that we are able to make progress towards 
our goal by considering a set of axioms which certainly meets criteria 1, 2 
and 4, but is so far from meeting criterion 3 that it is very easy to find 
sentences which are true in the standard interpretation but which cannot be 
derived from the axioms. With our ultimate goal in mind, therefore, we 
consider the theory Q which can be derived from the following seven axioms. 
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We combine an algorithm which 
checks whether the proof follows 
the rules and identifies the 
assumptions on which 7 depends 
with the algorithm which checks 
whether these assumptions are 
sentences in S. 


We can satisfy criterion 3 by taking 
our set of axioms to be Complete 
Arithmetic, but, as we shall see in 
Unit 8, this set does not satisfy 
criterion 2. 


We shall explain why it is fruitful 
to consider such a weak set of 
axioms in Unit 7. 


Definition 3.6 Axioms of the theory Q 
Q1 VaVy (2 =y' > x =y) 

are a EEA 

Q3 Yx (ar =0 > Jyr =y’) 


Q4 Va(x+0)=2 

Q5 VaVy (+ y') = (z +y) 
Q6 Vx(x-0)=0 

QT VaVy (x - y') = ((£ - y) +2) 


We now ask you to check that this set of axioms satisfies criterion 1. 


Problem 3.4 


Write down the properties of the standard interpretation / expressed by the 
axioms of Q, and hence satisfy yourself that each of these axioms is true in 
this interpretation. 


It follows from Theorem 3.2 and Problem 3.4 that the standard 
interpretation is an interpretation of the theory Q. This is, of course, as 
we intended. The theory Q is thus consistent. 


In fact the interpretations of the formal language given in Examples 3.5 
and 3.6 of Unit 4 are non-standard interpretations of Q. That is, all seven of 
the axioms of Q are true in both of these interpretations. 


Problem 3.5 


Check the examples, problems and additional exercises of Section 3 of Unit 4 The remaining axioms will be 

to see which of the axioms of Q have been shown to be true in (a) the shown to be true in Example 3.2. 
interpretation ./™* in Example 3.5 of Unit 4 and (b) the interpretation ./** 

in Example 3.6 of Unit 4. 


Example 3.2 


We show that all the axioms of Q are true in the interpretations ./* and 
A4™ of Examples 3.5 and 3.6 of Unit 4. 


It has already been noted in the solution to Problem 3.5 that Q3, Q5 and 
Q7 are true in both of these interpretations. 


We now turn our attention to the other four axioms. 


Axiom Q1 expresses the fact that the successor function is a one-one 
function. It is evident from the tables for the successor function in 
Examples 3.5 and 3.6 of Unit 4 that this axiom is true in both 
interpretations. 


Axiom Q2 expresses that there is no element in the domain of the 
interpretation whose successor is 0. Again, using the successor tables in 
Examples 3.5 and 3.6 of Unit 4, it is easily checked that this is true in both 
interpretations. 


The truth of axiom Q4 in both interpretations can be seen from the first 
columns of the addition tables in Examples 3.5 and 3.6 of Unit 4. Likewise 
the first columns of the multiplication tables in these examples show that 
axiom (6 is true in both cases. 


Thus all of the seven axioms of Q are true in these two interpretations. 
Hence any sentence which is derivable from these axioms is true in both 
interpretations. & 
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Now let us consider criterion 2. As the given set of axioms of Q is finite, 
there is a very simple algorithm for determining whether a given formula ¢ 
is an axiom. Just compare ¢ with each of the seven axioms of Q in turn. If 
¢ is identical with one of the sentences Q1 to Q7, then it is an axiom; 
otherwise, it is not. Thus criterion 2 is satisfied. 


We trust that you will agree that the set of axioms of Q is very simple, so 
that criterion 4 is satisfied. 


Now we show that criterion 3 is far from being met. 


It follows from Example 3.2 and the Correctness Theorem that any sentence 
which is not true in the interpretation. cannot be derived from the 
axioms of Q. That is, such a sentence cannot be a theorem of Q. Likewise, a 
sentence which is not true in the interpretation /“** also cannot be a 
theorem of Q. Thus, from Section 3 of Unit 4, it follows that none of the 
following sentences, each of which is true in the standard interpretation / is 
a theorem of Q. 


VaWy (x+y) = (y + 2) 
Vers =% 
valo =a) 310 

Va Vy (x+y) = (y - 2) 
Ve(0+2)=2 


Problem 3.6 


Show that none of the following sentences, each of which is true in the 
standard interpretation ., is a theorem of Q. 


(a) VaVyVz (x + (y+2)) =((@+y) +2) 
(b) Vay Vz (x - (y+ z)) = ((e+y) - z) 
(c) Vay Wz (a - (y + z)) = ((z - y) + (@-2)) 


It is clear from these examples that there are many sentences which are true 
under the standard interpretation.” but which cannot be derived from the 
axioms of Q. In this sense Q is a very weak theory. None the less, it will 
emerge from the next unit, where we indicate which theorems can be derived 
in Q, that it is a very useful theory. As an appetizer, we show that a 
sentence which in the standard interpretation states that ‘one plus one 
makes two’ can be derived from the axioms of Q. 


Example 3.3 
We show that 


kg (0 +0’) =0” 


1 (1) Va(«+0)=2 Ass 

2 (2) VaVy(aty’)=(a+y)! Ass 

2 (3) Vy(O'+y')=(0'+y)' UE,2 

2 (4) (0’+0’) =(0’+0)’ UE, 3 

1 (5) (0’+0)=0' UE, 1 
1,2 (6) (0’+0') =0" Sub, 5, 4 


On line 6 we have obtained the formula (0’ + 0’) = 0” by substituting the 
term 0’ for the term (0’ + 0) in the formula on line 4. This is a legitimate 
use of the Substitution Rule because the formula (0’ + 0) = 0’, which 
permits such a substitution, occurs on line 5. 


The assumptions in force on the final line are both axioms of Q. Hence we 
have shown that the formula (0’ + 0’) = 0” is a theorem of Q and so we can 
write Fg (0’ + 0’) = 0”. + 
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The relevant parts of Section 3 of 
Unit 4 are, respectively, 

Example 3.7(a), Problem 3.5(a) 
and (c), and Additional 

Exercise 5(a) and (c). 


SUMMARY 


We began the unit with some practical advice about finding formal proofs. 
We drew attention to the usefulness of the technique of proof by 
contradiction. Then we gave a list of techniques for finding formal proofs 
based on considering both the logical form of any assumptions and the 
logical form of the desired conclusion. We supplemented these techniques by 
a table of some standard cases of tautological consequence. 


Next we completed the description of our formal system by describing two 
rules of proof for handling the identity symbol, the Identity Introduction 
Rule (II) and the Substitution Rule (Sub). We drew attention to the fact 
that our formal system satisfies both the Correctness Theorem and the 
Adequacy Theorem, though we did not prove these theorems. 


Finally we considered the matter of adding to our formal system some 
axioms to express properties possessed by our standard interpretation of 
number theory. After a general discussion of axiom systems and theories, we 
introduced a particular theory Q which has only seven axioms. We checked 
that all the axioms of Q are true in the standard interpretation and we used 
the non-standard interpretations introduced in Unit 4 to show that there 
are many sentences of our formal language which are true in the standard 
interpretation but which cannot be derived from the axioms of Q. None the 
less we claimed that Q is a useful theory to study. We shall make good this 
claim in Units 7 and 8. 


OBJECTIVES 


We list those topics on which we may set assessment questions to test your 
understanding of this unit. 

After working through this unit you should be able to: 

(a) understand and use the technique of proof by contradiction; 

(b) understand the meaning and use of the rules II and Sub; 


(c) construct simple formal proofs using all nine rules of proof, making use 
of the techniques set out in Subsection 1.2 and the standard cases of 
tautological consequence set out in Subsection 1.3; 


(d) understand and use the Correctness and Adequacy Theorems; 


(e) understand the meanings of the terms theory, axiom, theorem, 
consistency, completeness and interpretation of a theory; 


(f) understand the definitions of Complete Arithmetic and of the theory Q; 


(g) use non-standard interpretations of Q to show that given sentences are 
not theorems of Q. 
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ADDITIONAL EXERCISES 


Most of these exercises provide further practice, should you feel you need it, 


in handling the main ideas in the unit on which you are likely to be assessed. 


There are a few harder problems, labelled as such in the margin. These are 
harder than any of the problems you are likely to encounter in the 
assessment and are included solely as challenges for the interested student. 


Section 1 


1 (a) What is wrong with the following attempt to show that, for all 
formulas ¢, the formula =3v ¢ can be derived from the formula 


Vu ag? 
1 (1) Wo-7¢ Ass 
DO) ae UE, 1 
3 (3) Ave Ass 
4 (4) @ Ass 
1,4 (5) (¢&-7¢) Taut, 2,4 
1,3 (6) (9&4) EH,5 
1 (7) (v6 (¢&-9)) CP,6 
1 (8) aug Taut, 7 
(b) Give a correct schematic proof to show that, for all formulas ¢, 
Yu nd F aA e 


2 Show how the proofs in Examples 1.1 and 1.3 can be used to help show 
that, for all formulas ¢, 


E (Ju 4 = -W ¢) 


3 Give formal proofs to show the following. 
(a) Yx (x +0) =x F 3z (0+r)=zx 
(D) araca E Wuye 
(c) Yz (x +z) = (x-1) F Yy 3z (ly +y) =2' 
(d) + (ArVy (£ +y’) = y > Yz Ia (z + z”) = 2’) 


4 Show each of the following, for all formulas ¢, ~ and 0. 
(a) w (¢ = 4), Wwa F Ju yp 
(b) W (eV 4) F (Iv ($ => 0) > I (OV Y)) 
(c) W (¢ — 0), w (¢ & p) F =W (70 = Y) 
5 Show that, for all formulas y, ô, ¢ and 4%, 
(8 > 3y (x & 4)), Yy (x > YF (8 > 3y (7 & 4)) 


6 Show that, for all formulas ¢, w and 9, 
ad, Ju (Y > $) F (Wu (OV p) > ~u (0 = ¢)) 


provided that the variable v does not occur freely in ¢. Indicate the 
steps of your proof which require that v does not occur freely in @. 


7 Show that, for all formulas ¢, 
Vu F adv 7nd 
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Warning! This is not a correct 
proof! 


Harder problem 


Harder problem 


Harder problem 


This result is used in Unit 7. 


Harder problem 


Section 2 


il 


The following is a correct schematic proof from which the assumption 
numbers have been omitted. Fill in the missing assumption numbers. 


(1) VaVyx=y Ass 


(2) Vyc=y UE, 1 
O ter II 
(4) 2=y UE, 2 
(5) -y=2 Sub, 3, 4 
G g= UE, 2 
2 Give formal proofs to show the following. 

(a) F VaVy (x =y > (z - £) = (y - y)) 

(b) F YzYyYz (x =y > (z - x£) = (z - y)) 

3 Give examples of formulas ¢ and w such that 7 is a logical consequence 
of ọ but not a tautological consequence of ¢. 
4 Show that the following statements are not true. 
(a) F Va (nz =0 =t =y) 
Hint: Use one of the facts established in the examples and 
problems in Section 3 of Unit 4. 
(b) F VaVy (a! =y' > 2 =y) 
5 Show that it is not the case that, for all formulas ¢, 
F (aug > Wwe) 
Section 3 
1 Let T be a complete and consistent theory. Show that if ® and Y are 

sentences such that Fy (® V Y), then either Fr ® or Fr Y. 

2 (a) Suppose that ®;, 6j,...,@, are sentences and that W is a sentence 
such that ®,, ®o,...,®, F Y. Show that 
F (®1 > (82 > Co (Be > W)--))) 

(b) Theorem 3.1 states that, for any theory T and all sentences W, if Y 
is derivable from T then Y € T. Prove this theorem directly within 
the formal system without appeal to the Correctness and Adequacy 
Theorems. Hint: As W is derivable from T then there are sentences 
®),@2,...,@, in T such that ®), ®2,..., 4 + Y. If T has axioms 
in the set S, there are derivations of each of ®1, 62,...,®, with 
assumptions in the set S. Combine all these derivations together in 
a suitable way. 

3 Show that the interpretation of the formal language given in 

Example 3.4 of Section 3 of Unit 4 is not an interpretation of the 

theory Q. Deduce that the axiom Q3 is not a logical consequence of the 

other axioms of Q. 

4 Show that none of the following sentences is a theorem of Q. 


(a) Iy Ys (y+ 2’) =a” 
(b) Wa Vy (x” + y) = (y' +2’) 
(c) ayWa(y+x)=y 
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Solutions to the Problems 


SOLUTIONS TO THE PROBLEMS 


Solution 1.1 


(a) LD) stow Ass 
2 (2) O Ass 
3 (3) yap Ass 
5 ay ew UE, 3 
2,3 (5) (¢&-¢) Taut, 2,4 
2 (6) (Wu->¢— (¢&-7¢)) CP,5 
2 O Sa Taut, 6 
1 (8) vug EH, 7 
The first two lines are standard when one of the assumptions is an This sort of commentary on the 
existential formula. We then assume Yv 7¢ hoping to derive a proof would not normally be 


contradiction. We use the UE Rule to drop the universal quantifier from ia il T. 
this formula, derive a contradiction and then use the proof by f formal pro S wola normally saca 
contradiction method. The use of the EH Rule on line 8 is legitimate as on its own! 

the variable v cannot occur freely in the formula ~Yv ~no. 


(b) 1 (1) Wd Ass 
2 (2) -aesap Ass 
Soe a(S)! p Ass 
1 (4) ¢ UE, 1 
5 (5) Ww(e-y) Ass 
5 (6) (6-4) UE, 5 
TS A ap Taut, 4,6 
1,3,5 (8) (b&w) Taut, 3,7 
1,3 (9) (Ww(¢>%) > (~&-y)) CP,8 
1,3 (10) ~w (ọ— 4) Taut, 9 
1,2 (11) -Ww(ọ >y) EH, 10 


The first four lines are standard. We introduce the given assumptions on 
lines 1 and 2. As one of the assumptions is an existential formula, we 
also assume the formula on line 3. As another is a universal formula, we 
use the UE Rule to drop the universal quantifier. We then assume the 
formula Vu (ġ — Y), use the UE Rule to drop the universal quantifier 
from this extra assumption and try to derive a contradiction. After 
deriving a contradiction, we use the proof by contradiction method. The 
use of the EH Rule on line 11 is legitimate as the variable v cannot 
occur freely in either the formula =Vv (¢ — Y) being derived or the 
other assumption Vv ¢ on line 10. 


Solution 1.2 


(a) 1 (1) wog y) Ass 
2 O W Ass 
1 (3) O A) UE, 1 
4 (4) = Ass 
1,4 (5) w Taut, 3, 4 
1,4 (6) Avy EI, 5 
1,2,4 (7) (Avp&-7Avy) Taut, 2,6 
1,2 (8) (-A¢— (Av~&-Jvy)) CP,7 
12 (9) Taut, 8 
1,2 (10) Wed UL9 


The first three lines of the above schematic proof are standard. First we 
introduce the two given assumptions and then use the UE Rule to 
remove the universal quantifier from the first assumption. Then we turn 
our attention to the formula Vu ¢ that we are ultimately aiming to 
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Solutions to the Problems 


derive. Our strategy is first to derive ¢ and then use the UI Rule. Since 
there is no other obvious way to make progress towards our aim of 
deriving ¢, we introduce —¢ as an assumption with a view to deriving a 
contradiction. Keeping in mind that we have the formula —=Jv w on 

line 2, we know that, to derive a contradiction, it would be enough to 
derive Jv y. We then use the proof by contradiction method. 


WE Ub) ace Ass 
2 (2) w(y— ~ne) Ass 
3 (3) (p> -¢) Ass 
4 (4) Wwy Ass 
4 (5) y% UE, 4 
3,4 (6) -= Taut, 3,5 
1,3,4 (7) (¢&-7¢) Taut, 1,6 
1,2,4 (8) ($ &-¢) EH,7 
1,2 (9) (Wwp—(¢&-¢)) CP,8 
1,2 (10) -=VWoy Taut, 9 


As —Vv Ņ is a negation, our strategy is to add the assumption Vu w to 
the assumptions ¢, Ww (Y — 7¢) and try to derive a contradiction. As 
the assumption Jv (y —> -¢) is an existential formula, preparatory to a 
use of the EH Rule we also assume the formula (Y — —@). We use the 
UE Rule on line 5 to drop the universal quantifier from one of the 
assumptions and then derive a contradiction on line 7. Because of the 
condition that the variable v does not occur freely in ¢, we have taken 
care to derive the contradiction (¢ & -@), rather than say (Y & ~y), so 
that we can then use the EH Rule on line 8 and finish off the proof by 
contradiction. 


Solution 1.3 


Here we adopt the standard strategy for proving disjunctions. To derive 

(3v ¢ V Vu nọ) we use the fact that this formula is a tautological consequence 
of the implication (~Jv ¢ — Vu 7@). We can derive this implication by first 
deriving Vv ~o from the assumption =w ¢ and then using the CP Rule. The 
derivation of Vv =¢ from ~v ¢ is very similar to our derivation of Vu ġ from 
74v =¢ in Example 1.3. We thus arrive at the following schematic proof. 


Solution 1.4 


We follow the standard strategy for proving bi-implications. 


1 
1 


( 
( 
( 
( 
( 
( 
( 


ui 


o A 


“I 


) 


a(¢ & y) 
(= V =~) 


(-(¢ & Y) > (7 V 7) 


(44 V y) 
1(¢ & Y) 


(4 V 4) > ~l & Y)) 
(=C & p) = (me V =4)) 


E G DEE Ass 
ZD A Ass 
2 (3) up EI, 2 
1,2 (4) (vd&-Jw9) Taut, 1,3 
1 (5) (¢@—> (av@&-73v¢)) CP,4 
EE E: Taut, 5 
1 (7) Nong. UI,6 
(8) (Adv ¢ — Wwe) CP. 
(9) (dau¢VVu-7¢) Taut, 8 


You can use truth tables to check 
that the use of the Tautology Rule 
on lines 2 and 5 is correct. 


Ass 
Taut, 1 
CPE? 
Ass 
Taut, 4 
CPS 5 
Taut, 3,6 
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Solutions to the Problems 


Solution 1.5 
1 (1) Av(¢@—>y) Ass 


2 (2) Wo Ass 
3 (3) (¢>¥) Ass 
2 (4) @ UE, 2 
Ded, (Sj =Y Taut, 3,4 
2,3 (6) wy EI,5 
1,2 (7) wy EH, 6 


This proof starts with a straightforward use of techniques (T1), (T2) 
and (T3) to give lines 1 to 4. As we want to derive 3v y, we follow (T10) 
and first try to derive 7, which we can by using the Tautology Rule. 


Solution 1.6 


1 (1) W#¢ Ass One alternative proof would have 
lines 1 to 6 as here, but on line 7 
a ee ~~ would apply the Tautology Rule to 
1 (3) ¢ UE, 1 lines 4 and 6 to obtain 7=¢, 
4 (4) (>ne) Ass depending on assumptions 4 and 5. 
y A The contradiction on line 8 would 
5 (5) Wwy = then be (¢ & ~ġ) and on line 9 we 
5 (6) w UE, 5 would then have 
se OR 8 Ng Taut, 3,4 (Vu > (¢& 7¢)). 
1,4,5 (8) (p&-7) Taut, 6,7 
1,4 (9) (Wwy -> (~&-y)) CP,8 
1,4 (10) -Vup Taut, 9 
1.2, (a) No EH, 10 


We obtained this schematic proof by following standard strategies. 
Following (T1), the assumptions we are given are introduced on the first two 
lines. Following (T2) and (T3), the UE Rule is applied to the first 
assumption, and we introduce (ù — —@) as a new assumption on line 4 with 
a view to a later use of the EH Rule. Now we turn our attention to the 
desired conclusion, ~v 7. Since this begins with a negation symbol, we 
follow (T4) by introducing the assumption Yv ~ and aiming to derive a 
contradiction. The UE Rule applied to Vu ~ gives us the formula 7. Thus to 
get a contradiction all we now need do is derive =ẹ. It is not difficult to see 
that this is a tautological consequence of the formulas ¢ and (7) — 7¢). We 
are thus able to complete the proof in the intended way. 


Solution 1.7 


1 (1) Ww(ọ— 8) Ass 
2 (2) IN =p) Ass 
1 (3) (> 8) UE, 1 
4 (4) (bv-¢) Ass 
5 (5) Wo Ass 
5 (6) ¢ UE,5 
7 (7) W7A(p & 6) Ass 
7 (8) 7(W&0) UE,7 
ANS Nom Taut, 4,6 
Toy (LO) 8 Taut, 3, 6 
1,4,5 (11) (b&8) Taut, 9, 10 
1,4,5,7 (12) ((p&0)&-(~ &A)) Taut, 8, 11 
1,4,5 (13) (ww~(y & 8) > ((Y& 0) & A(&O))) CP,12 
1,4,5 (14) vü LO) Taut, 13 
1,2,5 (15) —Wu-(2p & 8) EH, 14 
1,2 (16) (Wud Wu 7( & 8)) CP, 15 
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Solutions to the Problems 


This is quite a long schematic proof, but it can be seen that we have 
obtained it by following standard strategies. Following (T1), the two given 
assumption formulas are introduced and handled in the standard way on the 
first four lines, following (T2) and (T3). Then we turn our attention to the 
desired conclusion. Since this is the implication (Vu ¢ > —Vu 7(w & 0)), we 
follow (T7) and introduce the antecedent, Vv ¢, as an additional assumption 
on line 5 and aim to derive the consequent =Vv 7(w & 0). Since this is a 
negation, we follow (T4) by introducing Yv 7(w & 0) as a new assumption 
with the aim of deriving a contradiction. We achieve a contradiction on 

line 12 and then complete the proof in accordance with the strategies that 
we have already mentioned. 


Solution 1.8 


We need to show that, whenever all the formulas ¢, (=¢ V y) and 78 are 
true, then the formula —(7 — 6) is also true. So we need only consider the 
lines of the truth table where ¢ and —6 are both true, that is where ¢ is true 
and @ is false. So we need only consider two lines of the full truth table. 


(((¢ & (4 ¢ V p)) & = =) n (YW 9)) 


aE Le UJ El Mel sel eit GTO) De et Ea J 
LOS OE ORO) 20 0" 10. Oe O 


D®OOOO OOOOOOOO 


We see from column (©) that the formula is a tautology. It follows that 
a( — 0) is a tautological consequence of the formulas ¢, (~¢ V w) and =ð. 


Solution 2.1 


(a) UD aeS Ass 
(2) (e+2)=(z+2) II 
1 (3) (e+2)=(z+y) Sub, 1,2 
(4) (@=y> (z+2)=(z+y)) CP,3 
(5) Vz(z =y -> (z+ z) =(z+y)) UI, 4 
(6) YyYz(z=y>(z+z)=(z+4)) U5 
(7) YzYyYz(z =y > (z+2)=(z+y)) UL6 


The formula on line 3 has been obtained from that on line 2 by 
substituting y for the second occurrence of x. Since we have the formula 
x = y on line 1, this is a legitimate use of the Substitution Rule. 


(b) le Gl) aus ay Ass 
2:5 (2) ignite Ass 
2S) eee, Sub, 1,2 
1 (4) Y=z>2=2) CP, 3 
(5) (@=y>(y=z>2=2)) CP,4 
(6) Vz(e@=y—> (y=z->2=2)) UI, 5 
(7) YyYz(z =y > (y =z >z = 2)) UI, 6 


(8) YrYyYz (z= y> (y=z—>z=z)) UI,7 


The formula on line 3 has been obtained from the formula on line 1 by Note that it is not a legitimate use 
substituting z for y. This substitution is a legitimate use of the of the Substitution Rule to 


Substitution Rule because we have the formula y = z on line 2. substitute x for y in the formula on 
line 2, as the formula x = y on 


line 1 does not permit substitution 


Solution 2.2 of x for y. It only permits 


(a) PAD- yee Ae substitution of y for x. 
(2) y =y I 
eer (3) se S2 
(b) 1 (1) w=y Ass 
(2) ((e-2)-2)=((e-x)-2) I 
1 (3) ((y-a)-y)=((e+y)-x) Sub,1,2 
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Solutions to the Problems 


Solution 2.3 


We need to find an example of a formula ¢, and an interpretation, for which 
the formula (Vz Jy ¢ > Jy Vz ¢) is not true. It will then follow from the 
Correctness Theorem that it is not the case that + (Yx dy ¢ > Jy Yz ¢). 


There are lots of possible choices for the formula ¢. We take ¢ to be the 
formula y = x’. In the standard interpretation, the formula Vx Jy y = 2’ is 
interpreted as ‘for every natural number zx, there is a natural number y 
which is the successor of x’ and this is true. On the other hand the formula 
Jy Yx y = 2’ is interpreted as ‘there is a natural number y which is the 
successor of every natural number x’, which is false. So with this choice of ¢, 
the formula (Vz Sy ¢ > Jy Vz ¢) is false in the standard interpretation. 


Solution 3.1 

Plainly every sentence W in S' is derivable from S using the one-line proof 
1 (1) WU Ass 

So each such W is in Th(S). 


Solution 3.2 


Suppose that T is a theory which is not consistent. Then there is some 
sentence ® of the formal language such that both Fy ® and Fr —®. Now let 
W be any sentence of the formal language. The formula ((® & =) — Y) is a 
tautology. Hence Y can be derived from the formulas ® and —® using the 
Tautology Rule. Therefore, as T is a theory and so is closed under 
derivation (Theorem 3.1), it follows that Fr Y. 


Solution 3.3 


Suppose that T is a theory which is both complete and consistent. Let ® be 
any sentence of the formal language. Since T is complete, either Fr ® or 

Hr =ð. Since T is consistent, we cannot have both Fr ® and Fr ~®. Hence 
precisely one of Fr ® and Fr 7® holds. 


Solution 3.4 


We consider each of the seven axioms of Q in turn and state what they 
express in the standard interpretation . It should be evident in each case 
that the axiom expresses a true statement about ./ 


Q1 expresses that the function succ, the successor function, is one-one. 
Q2 expresses the fact that 0 is not the successor of any natural number. 


Q3 expresses the fact that every non-zero natural number is the successor of 
some natural number. 


Q4 expresses the fact that, for every natural number n, 
n+0=n. 

Q5 expresses the fact that, for all natural numbers n and m, 
n +succ(m) = suce(n + m). 

Q6 expresses the fact that, for every natural number n, 
nx0=0. 

Q7 expresses the fact that, for all natural numbers n and m, 


n x succ(m) = (n x m) +n. 
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Equivalently, if W € S, then every 
interpretation which makes S true 
also makes W true, so W is a logical 
consequence of S and hence 

Y € Th(S). 


Recall that a function f : A — B 
is one-one if, for all a1,a2 € A, 


f(ai) = f(a2) > a1 = a2. 


Note that the equations 
corresponding to axioms Q4 and 
Q5 give the definition of addition 
by primitive recursion, as given in 
Unit 2. 


Note that the equations 
corresponding to axioms Q6 and 
Q7 give the definition of 
multiplication by primitive 
recursion, as given in Unit 2. 


Solution 3.5 


In Example 3.7(b) of Unit 4 it is shown that axiom Q3 is true both in ./* 
and .#**. It follows from Solution 3.5(b) of Unit 4 that axiom Q5 is true in 
both these interpretations, and from the solution to part (b) of Additional 
Exercise 5 for Section 3 of Unit 4 that Axiom Q7 is true in both these 
interpretations. 


Solution 3.6 


We show that in each case the sentence is not true in the interpretation .** 
of Example 3.6 of Unit 4. As all the axioms of Q are true in this 
interpretation, it will follow from the Correctness Theorem that the sentence 
is not a theorem of Q. 


Since each sentence expresses a universal property, we can show it is false by 
giving a single counter-example in each case. As the following calculations 
show, we can obtain a counter-example for each sentence by interpreting zx, 
y and z as the element a of the interpretation ./**. 
(a) a+ (a +a) =a + =a, whereas (a +a) +a = ß+a = 8B. 

Hence a + (a + a) # (a +a) +a. So the sentence 

Vx Yy Vz (x + (y + z)) = ((x + y) + z) is not true in 4**. 
(b) a- (a-a) =a- ß = p, whereas (a -a)-a = 8-a =a. 

Hence a - (a - a) # (a - aœ) - aœ. So the sentence 

Vz Vy Yz (x - (y - z)) = ((x - y) - z) is not true in 4**. 
(c) a- (a +a) =a: B= p, whereas (a - a) + (a-a) =B+B=a. 

Hence a: (a + a) # (a - a) + (a - aœ). So the sentence 

Vr Vy Vz (x - (y + z)) = ((x - y) + (z - z)) is not true in 4**. 


SOLUTIONS TO ADDITIONAL 
EXERCISES 


Section 1 


1 (a) The use of the EH Rule on line 6 is not correct as, in general, the 
variable v may occur freely in the formula (¢ & ~¢) on line 5. 


(b) We can overcome this difficulty by using the contradiction on line 5 
to derive a contradiction in which the variable v does not occur 
freely. We thus arrive at the following correct proof. 


There are other interpretations of 
x, y and z which will give 
counter-examples, for instance 
interpreting them all by 8. 


1 (1) Word Ass 

1 )- = UE, 1 

3 (3) wọ Ass 

4 (4) @ Ass 
1,4 (5) (¢&-9) Taut, 2,4 

4 (6) (Wg > (¢& -9)) CP, 5 

4 (7) -=Wu-7@ Taut, 6 
1,4 (8) (Wong & Vu -¢) Taut, 1,7 
1,3. (9) (Wwe & -vw -7¢) EH, 8 

1 (10) (Ivo — (Wu7n¢ & =Wu-¢)) CP,9 

1 (11) -av¢ Taut, 10 
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Technique (T8) tells us that to derive the bi-implication 

(du ~no + Vu ¢) we should aim first to derive the two implications 

(au ng — Vv ¢) and (=Vu ¢ — Su7¢). The first of these implications 
can be obtained from the formal proof of Example 1.1 by one use of the 
CP Rule. The second implication can be derived by noting first that it 
is a tautological consequence of (~3v =o — Vv ġ) and then that this can 
be derived from the formal proof of Example 1.3 by one use of the CP 
Rule. We thus obtain the following formal proof. 


(a) 


t @) sua Ass 
2 (2) -7¢ Ass 
3 (3) Wo Ass 
3. = (4) =o UE, 3 
2,3 (5) (¢&-¢) Taut, 2,4 
2 (6) (Wud (6 & ¢)) CP, 5 
2) pe aD Taut, 6 
1 (8) -VWud EH, 7 
(9) (Ivano > Wọ) CP,8 
10 (10) -du7¢@ Ass 
11 (11) -¢ Ass 
11 (12) avd EL, 11 
10,11 (13) (av & -3v 7¢) Taut, 10, 12 
10 (14) (n¢— (av-¢ & =3v-¢)) CP, 13 
to (15) Taut, 14 
10 (16) Wọ UI, 15 
(17) (dung — Wwe) CP, 16 
(18) (AVu¢ — Av-¢) Taut, 17 
(19) (Aung = ~w o) Taut, 9, 18 


Technique (T10) suggests that we should look for a term 7 such 
that we can derive the formula ġ(T/x) where ¢ is the formula 

(0 +x) =x. We note that 4(0/z) is the formula (0 + 0) = 0, 
which can easily be derived from the formula Yz (x + 0) = x. So we 
obtain the following formal proof. 


1 (1) Ve(a#+0)=a Ass 


1 (2) @+0)=0 UEA 
1 (8) 32 (0-22) — cml 
Ta) Se i ers 

2 (2) 22" Ass 

2-3) aiey BE? 

1 (4) Jyy=y’ EH,3 


The proof starts with the standard preparation for a use of the EH 
Rule and we then follow (T10). 
1 (1) Va(a+2)=(x-2)! Ass 
(2) (yty)=(y-y)’ UE,1 
(3) sazyty)=2 EI, 2 
(4) VWysz(yt+y)=2' UL3 
(T9) suggests that we try to derive the formula 3z (y + y) = 2’. To 
derive this, (T10) suggests we first derive (y + y) = T’ for some 


term 7. This in turn is what leads us to eliminate the Vz in the 
assumption on line 1 by replacing the zs by ys. 


1 
aI 
i} 


1 (1) SrVy(e@+y’)=y Ass Note that there is a correct 
ie alternative proof based on using 
2 ae e T y’) j Y i the EH Rule straight after line 4 to 
2 (3) (@+2")=2 UE, 2 obtain da (x + 2’) = z’ on line 5 
2.4) 22(e@+2"%)=2 EI, 3 depending on assumption 1. Line 6 
ld then foll ing the UI 

2 (DVE F E UI, 4 Ba, «ig. Hii as 
E (6); Vzaoleee 2) 2’ EH, 5 

(7) (saVy(a+y') =y > Vzde(x@+2")=2') CP,6 


Following (T7), we assume the formula 3x Vy (x + y’) = y, derive 
Vz da (x + z”) = z’ and use the CP Rule. Lines 1 and 2 are then 
the standard preparation for a use of the EH Rule. We can 
anticipate following (T10) and then (T9) once we have derived the 
formula (x+ z”) = z’, which we can do on line 3 with a 
straightforward use of the UE Rule. 


1 (1) av(@eoy) Ass 

2 (2) (sou) As 

3 (3) Vurd Ass 

3 (4) 7¢ UE, 3 
DS (Oe ap Taut, 2, 4 
2,3 (6) Jv—-w EI,5 
1,3 (7) oy EH, 6 


As usual, we begin by introducing the given assumptions and, as 
one of them is an existential formula, we follow technique (T3). 
Following (T10), we aim to derive =~. A simple use of the UE 
Rule, following (T2), and use of the Tautology Rule does indeed 
give the formula —7. The desired conclusion follows by routine 
applications of the EI and EH Rules. 


1 (1) W(¢vv) Ass 

2 (2) w(¢— 86) Ass 

3 (3) (¢-6) Ass 

1 (4) (V4) UE, 1 
1,3 (5) (0V4) Taut, 3,4 
1,3 (6) w(0Vy) EI, 5 
1,2 (7) A(Ovy) EH, 6 

1 (8) (av(¢—> 0)—w(0vy)) CP,7 


We follow (T7) and introduce the extra assumption Jv (¢ —> 0). We 
then follow (T2) and (T3) for dealing with assumptions which are, 
respectively, universal and existential formulas. With (T10) in 
mind, we seek to derive (@ V w), which follows from the Tautology 
Rule. 


43 


44 


oa- WON KF 


5 
ts 
3,5 

1,3,5 
ee 
1,3 
na 


(1) VWu(¢— 9) Ass 

(2) w(ọ& y) Ass 

(3) (@&y) Ass 

(4) (¢— 8) UE,1 

(5) Vu(7A6 = 4%) Ass 

(6) (0 = 4) UE,5 

(7) 0 Taut, 3, 4 

(8) 70 Taut, 3,6 

(9) (0&7) Taut, 7,8 
(10) (Wv(-0 > 4) + (@&-0)) CP,9 
(11) =Vu (70 = 4) Taut, 10 
(12) Wu (20 = Y) EH, 11 


The first four lines follow (T1), (T2) and (T3). As the desired 
conclusion starts with a negation, we follow (T4) in line 5 to set up 
a proof by contradiction, and then (T2). Use of the Tautology Rule 
then gives a contradiction, and the remainder of the derivation 
follows the method of proof by contradiction, with a final use of the 


EH Rule. 

1 Aas 

2 (2) 

2 (3) 

4 4) 

5 (5) 
255: (6) 
25 N7) 
24 (8) 
2 (9) 
1,2 (10) 
11 (11) 
if (12 
39-448 


= ie 
mH on 
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£3 
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N 
p 
N 

Am ES A N se 
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m 
oo 


(6 = Ay (x & Y) 

Vy (x > 7) 

(x 7) 

Jy (x & Y) 

(x & y) 

(y & v) 

Jy (y & 4) 

Jy (y & Y) 

(Ey (x & Y) > Iy (7 & 4)) 
(6 — Jy (7 & y)) 

Jy (y & Y) 

(y& y) 

(x & y) 

Jy (x & Y) 

Jy (x & Y) 

(Ey (y& Y) > Jy (x & Y)) 
(Ay (y & Y) > ô) 

(6 > Jy (y & Y)) 


Taut, 3,5 
EI, 6 

EH, 7 
CE8 
Taut, 1,9 
Ass 

Ass 

Taut 3; 12 
EI, 13 

EH, 14 
CP, 15 
Taut, 1,16 
Taut, 10, 17 


The first three lines follow (T1) and (T2). Technique (T8) then 
suggests that we try to derive (6 — dy (ô & )) and (3y (y & Y) — ô) 
separately. To derive the former we follow (T7), though in light of the 
bi-implication on line 1 we introduce Jy (x & w) as an assumption 
rather than 6. We then follow (T3), (T11) and (T10), before using the 
EH Rule and CP Rule to obtain lines 8 and 9, as suggested by our 
earlier use of (T3) and (T7). We then obtained the desired implication 
ô — Jy (ô & Y) by use of the Tautology Rule again. We obtain the 
implication Jy (y & y) > 6 in a similar fashion. Then we use the 
Tautology Rule, as suggested by our earlier use of (T8), to obtain the 


desired result. 


E {OD Sr: Ass 

2 (2) w(y—> ¢) Ass 

3 (3) (b> ¢) Ass 

4 (4) W(@Vy) Ass 

4 (5) (Ov) UE, 4 

6 (6) Ww(0— ¢) Ass 

6 (7) (0-4) UE, 6 
3,4,6 (8) @ Taut, 3,5,7 

1,3,4,6 (9) (¢&-¢) Taut, 1,8 

1,3,4 (10) (Wv(@-4¢)>(¢&-7¢))  CP,9 
1,3,4 (11) -W (0> 4) Taut, 10 
1,2,4 (12) -Ww (0— ¢) EH, 11 


1,2 (13) (Wv(0@Vy) > -VWv(9> 4)) CP, 12 


As usual, following technique (T1), we begin by introducing the given 
assumptions on lines 1 and 2. Following (T3), we also introduce the 
assumption (% — @) on line 3 with a view to a future use of the EH 
Rule. Next we turn our attention to the desired conclusion. Following 
(T7), we introduce the assumption Vv (0 V w) on line 4. Since we are 
now aiming to derive =Vu (0 — ¢), (T4) suggests that we introduce the 
assumption Vv (9 — ¢) and then seek to derive a contradiction. Since 
we have the formula —¢ on line 1, we shall achieve a contradiction if we 
can derive ¢, so we put our trust in (T11) and look for a use of the 
Tautology Rule. Since the formula 


((((% > $) & (0 > 6)) & @V ¥)) = 9) 


is a tautology, we can derive the formula ¢ by the Tautology Rule. We 
are then able to follow our intended strategy in five more lines. 


We have used the given assumption that the variable v does not occur 
freely in ¢ on line 12, since without this assumption the use of the EH 
Rule would not be correct. 


1 (1) Wwọ Ass 

1 (2) ¢ UE, 1 

3) (3) 200 Ass 

4 (4) = Ass 
1,4 (5) (¢&-7¢) Taut, 2,4 
1,4 (6) (W¢&-VWd¢) Taut, 5 
1,3 (7) (Wwd&-Vvd) EH, 6 

1 (8) (du-¢— (Wud & -Vud)) CP,7 

1 (9) =du7¢ Taut, 8 


The first few lines in this schematic proof are standard. We begin by 
introducing the given assumption formula, and then apply the UE Rule 
to it. We aim to derive ~v 7¢, so we introduce Ju 7¢ as an 
assumption and hope to derive a contradiction. Since this assumption 
begins with an existential quantifier, we also introduce =¢ as an 
assumption with a view to a future use of the EH Rule. It is then very 
straightforward to obtain the contradiction (¢ & 7¢) on line 5. But now 
things become more tricky. This contradiction depends on the 
assumptions 1 and 4, but we are aiming to derive a contradiction 
depending on assumptions 1 and 3. In general, the formula (¢ & =) 
may contain free occurrences of the variable v, so a use of the EH Rule 
applied to line 5 would not be legitimate. So we use the contradiction 
on line 5 to enable us to derive another contradiction on line 6, namely 
(Vu ¢ & =Vv ¢), in which we can be sure that there are no free 
occurrences of v. We can then safely apply the EH Rule to line 6 and in 
this way we are able to complete our proof by contradiction. 
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T Ch) Svc Von yee Ass 
PA NG UE, 1 
Bat =z Il 
Pas = UE, 2 
Pao ei— ae Sub, 3,4 
1 (6) r=2 UE, 2 
(a) iS (ON ay, Ass 
(2) (car) = (£2) II 
1 (3) (ae) Saga) Sub, 1, 2 
(4) (=y-> (x-2)=(y-y)) CP,3 
(5) Vy(@=y>(e-z)=(y-y))  UI4 
(6) VaVy(x=y— (x-z)=(y-y)) ULS 
(b) ie {Cy oR ny, Ass 
(2) aie =a) (ea) II 
a(S) Cesar) —a( aes) Sub, 1,2 
(4) (w=y- (z-z) =(z-y)) CP,3 
(5) Yz (z =y -> (2-2) =(z-y)) UI, 4 
(6) WyYz(z=y> (z:z)=(z-4))  UL5 
(7) YrYyVz(z=y— (z-x)=(z-y)) UL6 


It is sufficient to give examples of formulas ¢ and 4% such that ġ F w but 
the formula (¢ — w) is not a tautology. It then follows from the 
Correctness Theorem that W is a logical consequence of ¢, but, as 

(¢ — 4) is not a tautology, it is not a tautological consequence of ¢. 
Example 1.1 provides one such example (there are of course many 
others): for any formula ¢, Iv ~ F —Vu¢, but the formula 

(Au ~no — 7AVv ¢) is not a tautology. 


By the Correctness Theorem, it will be enough to show that there is 
some interpretation of the formal language in which the sentence is 
false. 


(a) In Example 3.7 of Unit 4 we saw that this sentence is not true in 
the interpretation given in Example 3.3. As we pointed out there, 


the non-zero matrix is not the successor of any other 


1 

0 0 
matrix in this interpretation. 

(b) Take the interpretation with domain the set of integers Z, with + 
and - interpreted by the usual addition and multiplication on Z, 
and ’ interpreted by the function f: Z — Z given by f(z) = z?. In 
this interpretation, when x and y are given the values 3 and —3 
respectively, the formula x’ = y’ is true while x = y is false, so that 
the formula (x’ = y’ > x = y) is false. Thus the formula 
Va Vy (a! = y' —> x = y) is false in this interpretation. 


Let ¢ be the formula v = 0. Then the formula Jv v = 0 is true in the 
standard interpretation as there is indeed a natural number equal to 0. 
But the formula Vv v = 0 is false in this interpretation as there are 
many natural numbers not equal to 0. So with this choice of ¢, the 
formula (Jv ¢ — Yvo) is false in the standard interpretation. Then by 
the Correctness Theorem it is not the case that + (Su ¢ — Vvo). 


Any interpretation with domain U 
which interprets ’ by a function 
f: U — U which is not one-one 
will do. 


There are many other choices of ¢ 
and interpretations in which 
(Av ¢ > Vv¢@) is false. 


Section 3 


1 


Suppose that ® and W are sentences such that Hr (® V Y), and that 
neither Fr ® nor Fy Y. Since T is complete, it follows that both kp = 
and Fr =Y. The formula ((-® & =) — =(@ v W)) is a tautology and 
hence —(® V W) is a tautological consequence of the formulas = and 
=Y. Thus Fr =(8 V Y). But Fr (® V Y), and so this contradicts the 
fact that T is consistent. We deduce that either Hr ® or Hr W. 


(a) As ©), ®2,...,®, + Y, repeated use of the CP Rule gives 
b(O) + (2 > (--- fe + B)--))) 


(b) Suppose that W is derivable from the theory T and that T has as 
axioms the set of sentences S, so that T = Th(S). Then W is 
derivable from assumptions ©), ),...,®, in T. For 1 <i< K 
since ®; is in Th(S), it follows that there is a finite set of sentences 
from S, say A;, such that 


A; 4; 
Also, from part (a), since ®1, ®2,...,®, H Y we also have that 
F (@1 = (@a > (+ (® > D)e) 


Thus by writing the formal proofs of A; + ©; for each i, one under 
another, followed by the formal proof of 

F (®; > (2 > (---(®_ > W)---))), we can obtain a formal proof 
in which each of the formulas ©;, 62,...,®, and 

(®; — (2 — (--- > (k > W)---))) occur depending on 
assumptions only in 


A; U A2 U--- U Ak. 


Now the formula W is a tautological consequence of the formulas 
1, ®2,..., 0, and (©; — (2 > (---(®, —> W)---))). Hence, by a 
single use of the Tautology Rule, we can derive Y depending on all 
the assumptions needed to derive these formulas, that is, on 
assumptions in the set A; U A2 U---U Ax. Since there are only 
finitely many assumptions in this set, it follows that 


A, UAgU---UA, FY, 
so that Y is in Th(S), that is, Y is in T. 


We have already seen (in Example 3.7 of Unit 4 and in the solution to 
Additional Exercise 4(a) of Section 2 of this unit) that Q3 is not true in 
the interpretation given in Example 3.4 of Unit 4. Hence this 
interpretation is not an interpretation of the theory Q. 


In the solution to Problem 3.5(b) of Unit 4, we showed that Q5 is true 
in this interpretation. In the solution to Additional Exercise 3(b) for 
Section 3 of Unit 4, we showed that Q7 is true in this interpretation. It 
is easy to check that the remaining axioms of Q, namely Q1, Q2, Q4 
and Q6, are true in this interpretation. 


Thus all the axioms of Q other than Q3 are true in this interpretation. In fact it can be shown that no one 

Hence Q3 cannot be a logical consequence of the other axioms. of the axioms of Q is a logical 
consequence of the other six 
axioms. In this sense the axioms of 
Q are independent of one another. 
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We have seen in Example 3.2 that all the axioms of Q are true in the 
interpretation ./** given in Example 3.6 of Unit 4. Thus by the 
Correctness Theorem it will be sufficient to show that none of the given 
sentences is true in this interpretation. 


(a) For each element y of the interpretation .** we have 
yta =y+a= b, whereas a” = a’ = a. Thus for any y there is 
an element x, namely x = a, with y+ 2’ # x”. Hence the sentence 
Jy Va (y + 2’) = 2" is false in /™*. 

(b) We have a” + 8 = a' + b = a + p = a, whereas 
B +a! =8+a = b. Thus o” + 8# p +a, and hence the sentence 
Vz Vy (x” + y) = (y' + 2’) is false in **. 

(c) For each element y of the interpretation: if y 4 a, we have 
y -a = a, and hence y- a ¥ y; and, if y = a, we have a-0=0 # a. 
So for each y there is some element x of the interpretation such 
that y- x 4 y. Hence the sentence Jy Vz (y - x) = y is false in /™*. 
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